Query!!

[ray_stone]

Hi, During these days I am trying to understand IPS and IDS concepts. I just want to know how is different an IPS device from Firewall in the terms of traffic blocking as I know we can handle the traffic on ASA FW by using MPF then why we require IPS. Thanks

[vvarakan · Accepted solution]

ASA MPF has some specific Protocols engines covering various filtering options. With IPS/IDS you have access to an expanded range of conformance checks against traffic. Signatures can updated periodically for newer threats, with ASA MPF configuration might not always be possible for newer threats or for protocols not covered by applications engines

Vikram

[ray_stone]

Thanks Vikram!!!