Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPS packet or content filter

I'm a beginner with IPS, but I'm confused with the terms packet and content filter, when I'm looking in some documents on the web they are talking about packet filtering; statefull packet filtering etc ..., I see also the term content filtering, what is an IPS doing packet or content filtering ?

2 REPLIES
New Member

Re: IPS packet or content filter

IPS v.5.x perform both type of filtering.

Silver

Re: IPS packet or content filter

IDS/IPS devices are not firewalls and do not perform packet & content filtering (unless you stretch the definition and create a signature looking for specific keywords which blocks in-line).

Stateful means that the firewall tracks connections and allows reply traffic without checking an ACL:

http://en.wikipedia.org/wiki/Stateful_firewall

Content filtering devices examine the data stream and make a determination if the content of the traffic is allowed (ex: blocking unsafe for work websites):

http://en.wikipedia.org/wiki/Content_filter

143
Views
4
Helpful
2
Replies