Cisco IINS 2.0: Implementing IPS

Overview/Description
Intrusion detection system (IDS) and intrusion prevention system (IPS) solutions form an important part of a robust network defense solution. Maintaining secure network services is an essential requirement of a profitable IP-based business. This course defines intrusion prevention architectures, and introduces the underlying technologies and recommended practices for their deployment. Configuring the Cisco IOS Intrusion Prevention System (IPS) is a core competency for a network security administrator. This course describes how to configure Cisco IOS IPS on routers using Cisco Configuration Professional. The course includes a description of the building blocks of Cisco IOS IPS, its deployment options, and guidelines for signature tuning.

Target Audience
Network designers, administrators, engineers, and managers; systems engineers; individuals seeking the Implementing Cisco IOS Network Security (IINS) v2.0 640-554 certification, which is associated with the CCNA Security certification exam. Knowledge and skills equivalent to those learned in Interconnecting Cisco Networking Devices Part 1 (ICND1) are required, and a working knowledge of the Windows operating system and Cisco IOS networking and concepts is recommended.

Expected Duration (hours)
2.0

Lesson Objectives

Cisco IINS 2.0: Implementing IPS

compare and contrast IDS and IPS

recognize the advantages of deploying the IPS and IDS platforms

match intrusion detection techniques to advantages

recognize how IPS responds to attack

match evasion methods to IPS antievasion features

identify considerations for implementing alarms in IPS signatures

recognize the need for IPS alarm monitoring and options for event managers

identify the recommended practices in deploying IPS

recognize Cisco IOS IPS signature features

identify support for SDEE and Syslog in the Cisco IOS IPS solution

recognize how to work with signature files