Configuring Cisco IOS Firewall Intrusion Detection System
Short summary:
Cisco IOS Security Configuration Guide. on Detection System This chapter describes the Cisco IOS Firewall Intrusion Detection System (IDS) feature. Intrusion detection systems provide a level of protection beyond the firewall ...
Long summary:
Configuring Cisco IOS Firewall Intrusion Detection System SC-255 Cisco IOS Security Configuration Guide Configuring Cisco IOS Firewall Intrusion Detection System This chapter describes the Cisco IOS Firewall Intrusion Detection System (IDS) feature. Intrusion detection systems provide a level of protection beyond the firewall by protecting the network from internal and external attacks and threats. Cisco IOS Firewall IDS technology enhances perimeter firewall protection by taking appropriate action on packets and flows that violate the security policy or represent malicious network activity. For a complete description of the Cisco IOS Firewall IDS commands in this chapter, refer to the Cisco Secure Integrated Software IDS Commands chapter of the Cisco IOS Security Command Reference. To locate documentation of other commands that appear in this chapter, use the command reference master index or search online. In This Chapter This chapter has the following sections: Feature Overview Cisco IOS Firewall IDS Configuration Task List Monitoring and Maintaining Cisco IOS Firewall IDS Cisco IOS Firewall IDS Configuration Examples Feature Overview The Cisco IOS Firewall IDS supports intrusion detection technology for midrange and high-end router platforms with firewall support. It is ideal for any network perimeter, and especially for locations in which a router is being deployed and additional security between network segments is required. It also can protect intranet and extranet connections where additional security is mandated, and branch-office sites connecting to the corporate office or Internet. The Cisco IOS Firewall IDS feature identifies 59 of the most common attacks using signatures to detect patterns of misuse in network traffic. The intrusion-detection signatures included in the Cisco IOS Firewall were chosen from a broad cross-section of intrusion-detection signatures. The signatures represent severe breaches of security and the most common network attacks and information-gathering scans. For a description of Cisco IOS Firewall IDS signatures, refer to the Cisco IOS Firewall IDS Signature List section. Configuring Cisco IOS Firewall Intrusion Detection System Feature Overview SC-256 Cisco IOS Security Configuration Guide The Cisco IOS Firewall IDS acts as an in-line intrusion detection sensor, watching packets and sessions as they flow through the router, scanning each to match any of the IDS signatures. When it detects suspicious activity, it responds before network security can be compromised and logs the event through Cisco IOS syslog or the Cisco Secure Intrusion Detection System (Cisco Secure IDS, formerly known as Net Ranger) Post Office Protoco The network administrator can configure the IDS system to choose the appropriate response to various threats. When packets in a session match a signature, the IDS system can be configured to take these actions: Send an alarm to a syslog server or a Cisco Secure IDS Director (centralized ...
Source: www.show.it
Search Terms:
Related
NSA/SNAC RSCG Executive Summary Card, security of a Cisco router along with some
important general principles for ... are
used for remote router configuration. Some
services that should ...,
more
Cisco router configuration tutorial, type port (for Cisco 2500 series) to enter
the interface configuration mode. ... are
being used issue the show process
command. Router(config)#show process ...,
more
Cisco Reset a Cisco Router to Factory Default Settings, Components Used. Conventions. Instructions
to Reset a Cisco Router Back to Factory
Defaults. Method 1. Method 2. Verify.
Networking Professionals Connection ...,
more
