03-30-2010 05:32 AM - edited 03-10-2019 04:56 AM
Hello
Please Clarify me,does the IPS stops Virus/Malware at the Edge,Like the ProxyAV or Fortinet or Even CSC-SSM
Thanks
03-30-2010 05:54 AM
It does not protect against virus (not an anti virus appliance).
Here is what it can prevent:
http://www.cisco.com/en/US/products/sw/secursw/ps2113/index.html
03-30-2010 06:26 AM
Thanks man,but it stops worm and Malware howz that? with no action for virus?
How the sensors works in order to stops worm and Malware
Explain more
03-30-2010 01:30 PM
IPS sensor has the followiong features:
1) Analysis engine with thousands of signatures. If a packet and/or traffic matches specific signature, it will trigger specific action accordingly.
2) Anomaly engine, where it baseline the traffic pattern, and report if there is anomaly to the normal traffic pattern.
Here is a more detailed explaination of the IPS services:
IPS is not design to prevent virus, hence ASA has 2 different modules: AIP-SSM (IPS module) and CSC-SSM (antivirus module).
03-30-2010 11:42 PM
But how it works to stop Warm and Malware? however CSC-SSM does this function as well
03-31-2010 01:31 AM
CSC module only supports 4 protocols, ie: FTP, HTTP, SMTP and POP3.
IPS has thousands of signatures and handles all other protocols, not restrictive to the above 4 protocols on CSC module.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: