ConfiguringCiscoIOSIPS幻灯片.pptVIP

Summary You can configure IPS policy on a router by using the CLI or the SDM. CLI does not display the signature parameters. IPS CLI allows you to specify SDF locations, merge SDF files, disable signatures, assign rules to interfaces, and limit the detection scope using ACLs. SDM offers a wizard that simplifies the IPS configuration. IPS Policies wizard deploys default signature definitions from a specified SDF location. You can then use the SDM to edit the policy and modify global settings. SDM offers a view for SDEE messages containing status, errors, and alerts. You can use the SDM to tune the signature parameters. Module Summary Cisco IOS Firewall combines the stateful firewall engine with application-layer filtering for selected applications. Cisco IOS Firewall provides stateful support for TCP, UDP, and ICMP. Cisco IOS Firewall can be configured through the CLI, or the SDM, which provides the Basic and Advanced Firewall Configuration wizards for expedited deployment. IDS and IPS are considered complementary technologies that differ in reaction to attack, placement in the network, and signature tuning. Host and network IPS should be deployed in parallel to maximize the protection strength. Cisco IOS IPS can be configured, tuned, and monitored through the CLI or SDM, which offers a wizard for simplified provisioning. Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 Cisco IOS Threat Defense Features Configuring Cisco IOS IPS Configuring Cisco IOS IPS Cisco IOS IPS Configuration Steps Configure basic IPS settings: Specify SDF location Configure failure parameter Crea