Computers, Cisco CCNP ISCW Certification Exam Tutorial: The Key Difference Between IPS And IDS
You're going to need to know all the vital details of configuring and troubleshooting Cisco's Intrusion Prevention System (IPS), both from the command line and via Security Device Manager (SDM).
We first need to draw a clear line between the operation of the Intrusion Prevention System and the Intrusion Detection System (IDS). Those terms sound similar, but they're quite different in operation.
An IDS does just what its name tells us - it detects network intrusion. Simple enough! However, the IDS is basically a "town crier" in that it will notify other network devices about the attack, but does not directly defend against the attack itself.
The IDS does not receive traffic flows directly. Instead, the traffic flows are mirrored to the IDS.
When infected traffic does hit the network, the IDS will see this and take appropriate action. The problem is that this appropriate action is not direct action; since the IDS is not in the traffic flow, it has to inform a network device that is in that flow that action must be taken.
By the time the IDS detects an issue and notifies the appropriate network devices, the beginning of the infected traffic flow is already in the network.
In contrast, our Intrusion Prevention System (IPS) does sit in the middle of the traffic flow - in this case, the IPS will actually be our Cisco router. When the IPS detects a problem, the IPS itself can prevent the traffic from entering the network.
Cisco's website describes the IPS as a "restructuring" of the IDS. While you'll see more of IPS than IDS in today's real-world networks, we have to be crystal clear on the differences between the two for the ISCW exam. Make sure you're comfortable with configuring IPS from the command line and by using SDM as well!
Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNP certification and CCNA certification tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.
Visit his blog, which is updated several times daily with new Cisco certification articles, free tutorials, and daily CCNA / CCNP exam questions!
A free 7-part course, "How To Pass The CCNA", is also available.
Earn your CCNA with The Bryant Advantage!
Related Tags: certification, traffic, exam, prevention, system, cisco, ccnp, flow, detection, intrusion, iscw, ids, ips
Your Article Search Directory : Find in Articles
Recent articles in this category:
- Fix Printer, Keyboard, Speaker and Monitor Cables With Funky Organizers
There are different types of cables that are used when you have a desktop computer at home. Most of - The Growing Trend of Asterisk Phone Systems
Truly, businesses are doing everything they can in the economy and competitive world of today to rem - The Future of Business Intelligence: Innovations in Location Intelligence
In the coming years, many business analysts are predicting that Business Intelligence (BI) will play - Adobe Photoshop Album Starter Edition and What Happened to the Unlock Codes
Adobe has long been known as a star in the digital image editing world and the Adobe Photoshop Album - Choosing the Best Computer For Graphic Design
In the 1980s, desktop publishing came out and graphic designers began to utilize computers for all k - Versatility of Pocket HD Camcorders
In the era of the do-everything handheld gadget, high def camcorders family seems almost passee. The - Contemporary Office Furniture
When considering Contemporary Office Furniture there are a few things that you really should conside - Professional Web Design, Professional Web Designer
There is a lot to consider if you are looking for a Professional Web Design. So let's get to it. Fir - Cell Phone Protection and Safety For Kids
If your like the millions of parents giving your children a cell phone for safety when their away fr - Looking For That Smart Pc Workstation And Desk
Do you need a work area at home. Maybe it is just for doing bills. It may be for a community work ar
Most viewed articles in this category:
- Voip Residential Comparison Guide: Evaluating Packet8, Lingo, And Vonage
Voice over internet protocol [internet telephony] is a rapidly growing technological alternative to - What's The Difference In The Ionic Breeze Quadra?
The Ionic Breeze Quadra is the newer line of ionic breeze units offered by The Sharper Image. These - Selling World of Warcraft Accounts
Everybody knows that WoW is one of the most exciting MMORPGs ever created. This makes selling WoW ac - Film Cameras
Film cameras are simple cameras, which could be used by all easily. People prefer to use film camera - Salesboom SLA-MS Competition
Oh, the irony. Online CRM Services shy away from offering customers a Service Level Agreement. Why t - How To Improve Your Computer Speed Almost Instantly
Probably your computer, even though you bought it last year its no longer that much fast. Like any o - The Mosquito Ringtone - The Tone Adults Can't Hear
Without a doubt, the mosquito ringtone is one of the most popular ringtones ever. Good luck trying - Auto Navigation Systems And Gps Technology While Traveling
If you have managed to do any research on auto navigation systems I'm sure you've come across countl - Do Cheap iPods Really Exist?
If you know anything about music trends, you know that iPods are the hottest portable music device t - Online Mobile Phone Offers: Take 10 Minutes To Save £360 On Your Next Mobile Phone Contract
Cash Is Falling Out Of Your Pocket If you live in the UK, you're probably paying line rental on a m
