Please enable JavaScript.
Coggle requires JavaScript to display documents.
Cisco Intrusion Detection & Prevention System (IDS/IPS) (Integration…
Cisco Intrusion Detection & Prevention System (IDS/IPS)
IPS Features
In-line Deployment
Ability to drop malicious traffic
Introduces delay
Network design is altered
IDS Features
Passive Deployment
Generates alerts only
No Delay is introduced
No change is required in network topology
Integration options
Cisco Firepower Series
AIM & NME - IPS
Virtual NGIPS
Software support
ASA with Firepower
Dedicated appliance
Malicious Traffic Detection
Policy-based IPS
Anomaly-based IPS
Reputation-based IPS
Signature-based IPS
Terminologies
False Negative
True Positive
False Positive
True Negative
Risk Value
Attack Severity Rating (ASR)
Attack Relevancy (AR)
Signature Fidelity Rating (SFR)
Global Correlation
Target Value Rating (TVR)
Cisco NGIPS Solutions
FireSIGHT Management
ASA with Firepower
NGIPS
Firepower 7000/8000 Series