Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPS at Edge

Hello

Please Clarify me,does the IPS stops Virus/Malware at the Edge,Like the ProxyAV or Fortinet or Even CSC-SSM

Thanks

5 REPLIES
Super Bronze

Re: IPS at Edge

It does not protect against virus (not an anti virus appliance).

Here is what it can prevent:

http://www.cisco.com/en/US/products/sw/secursw/ps2113/index.html

New Member

Re: IPS at Edge

Thanks man,but it stops worm and Malware howz that? with no action for virus?

How the sensors works in order to  stops worm and Malware

Explain more

Super Bronze

Re: IPS at Edge

IPS sensor has the followiong features:

1) Analysis engine with thousands of signatures. If a packet and/or traffic matches specific signature, it will trigger specific action accordingly.

2) Anomaly engine, where it baseline the traffic pattern, and report if there is anomaly to the normal traffic pattern.

Here is a more detailed explaination of the IPS services:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/data_sheet_c78-459520_ps4077_Products_Data_Sheet.html

IPS is not design to prevent virus, hence ASA has 2 different modules: AIP-SSM (IPS module) and CSC-SSM (antivirus module).

New Member

Re: IPS at Edge

But how it works to stop Warm and Malware? however CSC-SSM does this function as well

Super Bronze

Re: IPS at Edge

CSC module only supports 4 protocols, ie: FTP, HTTP, SMTP and POP3.

IPS has thousands of signatures and handles all other protocols, not restrictive to the above 4 protocols on CSC module.

269
Views
15
Helpful
5
Replies