Cisco IPS 7.0: IPS Traffic Analysis, Countermeasures, and Deployment Architecture


Overview/Description
Target Audience
Expected Duration
Lesson Objectives
Course Number



Overview/Description
Network intrusion prevention system (IPS) and intrusion detection system (IDS) sensors use various techniques to analyze network traffic in order to optimally detect suspicious and malicious traffic while maintaining the desired performance levels. These sensors can be deployed in various situations and architectures to enhance network-based protection of enterprise assets. This course describes network IPS traffic analysis methods, evasion methods that are used by attackers to avoid detection, and common anti-evasive countermeasures that network IPS engines use to avoid false negatives. It also describes common deployment scenarios and provides design guidelines for these scenarios.

Target Audience
Anyone wishing to obtain the Cisco Certified Network Professional CCNP Security, Cisco Certified Security Professional CCSP Certification or Cisco IPS Specialist Certification designation. Established IT professionals with a good understanding of networking and Cisco technology, installation, troubleshooting and monitoring of devices used to maintain integrity, confidentiality and availability of data and network devices that Cisco uses in its security infrastructure. Candidates who have completed the Cisco Certified Network Associate Security Certification - Implementing Cisco IOS Network Security (IINS)

Expected Duration (hours)
1.0

Lesson Objectives

Cisco IPS 7.0: IPS Traffic Analysis, Countermeasures, and Deployment Architecture

  • describe network IPS traffic analysis methods
  • describe network IPS evasion techniques
  • recognize where to deploy network IDS and IPS sensors
  • select an appropriate IPS Internet edge network integration method for a particular scenario
  • describe firewall integration methods for network IPS at the enterprise Internet edge
  • identify key considerations for deploying network IDS and IPS sensors in an enterprise WAN
  • identify key considerations for deploying network IDS and IPS sensors in enterprise data centers
  • recognize how to plan centralized sensor deployments in enterprise campus networks
  • Course Number:
    cc_ipss_a02_it_enus