cisco certification courses

cisco certification courses.Figure 2-12 IDS Deployment ExampleAs can be seen in Figure 2.12, a compromised host sends malicious packets to multiple hosts on subnet 10.10.20.0/24. The IDS device deployed in promiscuous mode receives and analyzes the packets and then sends an alert message to the monitoring system, but the malicious packets still reach subnet 10.10.20.0/24 without any problem.Figure 2.13 shows how to deploy an IPS device in inline mode so that it discards packets that fail detection and sends an alert message to the monitoring system at the same time.Malicious packets (blocked by IPS) 2.2 Network Security Systems 129However, Intrusion Prevention System (IPS) devices not only detect all of the above security threats, they can also drop malicious packets inline. When an IPS device first goes live within a network, it is first deployed in promiscuous mode (monitored mode). The purpose of doing so is to first assess the impact of introducing IPS devices on the network infrastructure and operations. Then, deploy the IPS in inline mode to block any malicious traffic within the network without impacting the service.IPS management systemFigure 2-13 IPS Deployment ExampleThere are various types of IPS, as shown below.Traditional network-based IPS (NIPS)ONext Generation IPS System (NGIPS)O "Host-based IPS (HIPS)O The Cisco IPS4200 sensor and Catalyst 6500 IPS module are both traditional NIPSO These models of devices have