Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

IPS and DDOS protection

Hi all

I have been reading some info on ips and ddos

I believe that IPS cannot really deal with DDOS attack as they only look at traffic from one source etc.

can anyone tell me if IPS can prevent ddos? or should you be looking at something else ?

cheers

2 REPLIES
Gold

IPS and DDOS protection

Cisco IPS sensors can provide limited DDoS protection under a small set of circumstances (all three must be satisfied):

1. The DDoS attack has a signature.

2. The signature correctly triggers (you'll never know what string the signature triggers on, because Cisco keeps that information secret, unlike some other vendors like SourceFire).

3. The DDoS attack is not volumetric (most DDoS attacks relay on a greater volume of traffic overwhelming your access capacity) It doesn't matter how well an IPS sensor can detect and block traffic if your access pipe is full.

- Bob

New Member

IPS and DDOS protection

3292
Views
0
Helpful
2
Replies
CreatePlease to create content