Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

IPS CPU usage

I'm in the process of studying for my CCNA Security and just finished the section about IDS and IPS. I knew about them before, but didn't know that they could be configured on a standard ISR through the SDM. I have a 2811 as our main router, then goes out to our ASA and then to our WAN router. If I implement IPS on my main 2811 router without the network modules or aim cards, about how much cpu usage does it us? Is it going to greatly slow down our network, or will I really even notice?

On the 2811, we have 2 point to point T1's, and does all the main routing. Will having IPS run off the same CPU slow down my network? Or would it be best to look into the AIM module, or something else?

1 REPLY
Bronze

Re: IPS CPU usage

Do not enable all IPS signatures. The router may not be able to able to compile all signatures, resulting in high CPU and memory usage, degraded performance, and a system crash.

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ips_v5.html#wp1093849

227
Views
0
Helpful
1
Replies
CreatePlease to create content