Ciso IOS Firewall and IOS IPS

Unanswered Question
Nov 2nd, 2009

Is IOS Firewall and IOS IPS different feature sets or are they the same. Can one be utilized without the other.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Mon, 11/02/2009 - 12:47

Yes they are in the same Feature Set ( Advanced Security) and they can be independent of one another.

tech_trac Mon, 11/02/2009 - 12:50

So does it mean that it is one as a product (advanced security feature set) but different as functionality.

Secondly, is it necessary to install the IPS module (NME-IPS) in ISR Router to activate the IOS IPS features.

Collin Clark Mon, 11/02/2009 - 12:53

Yes, when you buy the feature set you get the ability to run both. You do not the IPS module, however running IPS in IOS only, you may only have a subset of signatures (depending on your RAM & flash). Also offloading to the module will save resources on the router. IPS is pretty demanding when running in IOS only.


This Discussion