ios ips

[mialbert]

I'm running ios ips on a c3825 isr.  We were having multiple instances of intermittent latency and poor wan performance.  I disabled and retired all signatures from basic category except a handful.  I noticed there was still poor performance.  I then removed ios ips from the outbound direction of the wan interface.  That resolved issue.  Ios is only running on in direction on the wan interface.  Am i sacrificing anything by just leaving the wan interface set for ips inbound only and removing outbound?  

[Philip D'Ath]

Is this really just a private WAN, or is it an Internet circuit?

[mialbert]

an internet circuit

[Philip D'Ath]

I normally only use it inbound - to protect servers on the inside of the network from the Internet.  It's up to the Internet to protect itself from your users.