We utilize all of the IPS signatures. Unless you allow IM'ing (ie AOL IM), torrenting, etc., you will find that the IPS signatures rarely give false positives. We have tested the latest signatures rather thoroughly and have found them to not adversely affect network traffic.
FYI, we found that once we enabled ProtectLink Web (set to medium security as recommended), ProtectLink prevents any harmful websites, malware, etc. before the traffic even hits the router (and thus the IPS layer). The biggest plus is that we found our WAN thoroughput to increase to max (30 Mbps strong vs ~22Mbps) once ProtectLink was turned on with IPS!!! Our theory, based on the debug logs, is that turning on ProtectLink actually utilizes a second 500MHz core on the CPU.
We have found that Trend Micro really takes ProtectLink Web serious by keeping their *signatures*, blacklists, etc. extremely up-to-date. Especially compared to Cisco's SMB signatures for the SA500 Series routers. Don't even get me started on the outdated IPS signatures for the WRVS4400N, etc. routers!
FYI, the only URL filtering that we utilize/block in ProtectLink Web are the *harmful* URLs. Everything else is allowed. We let the IPS signatures provent the torrent/IM/etc type traffic.
ISA500 series small business integrated security appliances can be
accessed, monitored and managed remotely. The below articles will give
you an insight of remote administration settings on ISA500 series
devicesCisco OnPlus Settings on ISA500 Series Integ...
A VPN or Virtual Private Network is a secure network over an unsecure
environment like internet. The VPN allows the remote clients to access
the internal network resources (private network) over the Internet
(public). These are the most common VPN article...
Captive portal is an additional authentication step that can used for
both guests and authenticated users. Clients will see a special web page
for authentication purposes before they are allowed to use the internet
normally. Captive portal makes use of th...