cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4662
Views
0
Helpful
4
Replies

IPS on the core router

Hi,

 

Is it good practice to enable IPS on the core router to inspect internal traffic?

Please mention bad impacts to normal traffic.

On the edge firewall IPS is enabled.

 

Thanks

 

4 Replies 4

Dennis Mink
VIP Alumni
VIP Alumni

In mh opinion no. A core router should route traffic primarily (or more likely this is a layer 3 switch). Ips needs to be done on hardware that is made for it. In ciscos case: firepower

Please remember to rate useful posts, by clicking on the stars below.

Dennis Mink
VIP Alumni
VIP Alumni

In mh opinion no. A core router should route traffic primarily (or more likely this is a layer 3 switch). Ips needs to be done on hardware that is made for it. In ciscos case: firepower

Please remember to rate useful posts, by clicking on the stars below.

balaji.bandi
Hall of Fame
Hall of Fame

Cisco Best Practice to have dedicate device if the enviroment have high traffic, it also suggested not to enable any processon Core router, since it process major part of your network.

 

if you can post the topology we can suggest where to place this IPS to best outcome.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Drawing1.jpg

Review Cisco Networking products for a $25 gift card