ccna 4 sample.pdf

ccna 4 sample.pdf.5.1 IPS Technologies 123 IDS and IPS technologies use features to detect patterns in network traffic. A feature is a set of rules that an IDS or IPS uses to detect malicious behavior. Features can be used to detect serious security breaches, common network attacks, and to gather information. IDS and IPS techniques can detect atomic feature samples (single packets) or composite feature samples (multiple packets).5.1.L5 Advantages and Disadvantages of IDS and IPSAdvantages and Disadvantages of IDSOne of the main advantages of the IDS platform is that it is deployed in offline mode. Since IDS sensors do not work online, it does not affect network performance. It does not introduce latency, jitter, or other traffic issues. Also, if a sensor fails, it does not affect network functionality. It only affects the IDS's ability to analyze data.However, there are many drawbacks to deploying an IDS platform. IDS sensors are primarily concerned with identifying possible incidents, technical incident-related information, and reporting. IDS sensors cannot stop triggerpackete, nor are they guaranteed to stop connections. They are not very useful for stopping mail viruses and automated attacks such as worm attacks.Users must have a mature security policy and good operational knowledge of IDS deployments when deploying IDS sensors to respond to behavior. Users must take the time to tune the IDS sensor to achieve the desired level of intrusion detection.Finally, because IDS sensors do not work online, there are many pitfalls to IDS implementation when many cyberattacks are enabled with cybersecurity evasion techniques.Pros and Cons of IPSDeploying an IPS platform in an online mode has both advantages and disadvantages.One advantage of an IPS sensor over an IDS sensor is that it can be configured to perform packet drop behavior so that it can stop triggered packets, connection-related packets, or packets from the source IP address. Also, because it works inline, the IPS sensor can use flow normalization techniques to reduce or eliminate many potential network security evasion behaviors.