cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

5033
Views
0
Helpful
2
Replies
Highlighted
Frequent Contributor

IPS and DDOS protection

Hi all

I have been reading some info on ips and ddos

I believe that IPS cannot really deal with DDOS attack as they only look at traffic from one source etc.

can anyone tell me if IPS can prevent ddos? or should you be looking at something else ?

cheers

2 REPLIES 2
Highlighted
Rising star

Cisco IPS sensors can provide limited DDoS protection under a small set of circumstances (all three must be satisfied):

1. The DDoS attack has a signature.

2. The signature correctly triggers (you'll never know what string the signature triggers on, because Cisco keeps that information secret, unlike some other vendors like SourceFire).

3. The DDoS attack is not volumetric (most DDoS attacks relay on a greater volume of traffic overwhelming your access capacity) It doesn't matter how well an IPS sensor can detect and block traffic if your access pipe is full.

- Bob

Highlighted
Beginner

Content for Community-Ad