cisco Intrusion Prevention Systems (IPS)

alsayed · ‎04-11-2010

Hello

the following form the cisco reference guide,how the IPS Stops network virus?

--------------------------------------------------------------------

Cisco Intrusion Prevention System (IPS) solutions accurately identify, classify, and

stop malicious traffic, including worms, spyware, adware, network viruses, and

application abuse, before they affect business resiliency.

Thanks

dhananjoy chowdhury · ‎04-11-2010

The IPS has signatures matching patterns for various viruses and malicious codes.

IPS analyzes the packet/stream and if it matches any of the signatures that are enabled, it will take predefined actions like block/ alert, etc.

You can get more details on the Cisco ips signatures here.

http://tools.cisco.com/security/center/search.x?search=Signature

alsayed · ‎04-11-2010

Thanks for ur reply

but is IPS isn't design to be against virus!right,i mean not an Antivirus appliance

Jennifer Halim · ‎04-11-2010

You are right. IPS is not an anti virus appliance, ie: it will not be able to clean the host which is infected by virus, however, it can help to prevent the spread of network virus. IPS can detect that there is anomaly of the traffic from normal traffic pattern, and will be able to detect and prevent the outbreak of the virus.

Hope that answers your question.

alsayed · ‎04-11-2010

Hi halijenn

Thanks for ur reply all time around this forum

Thanks