ccna 4 skills assessment

ccna 4 skills assessment.The downside of IPS is that using IPS sensors can negatively impact network performance by generating errors, failures, and being overwhelmed by too much traffic. This is because the IPS must be deployed inline and traffic must pass through it. IPS sensors affect network performance in the form of causing latency and jitter. IPS sensors must be properly sized and implemented so that time-sensitive applications, such as VoIP, are not impacted.Deployment ConsiderationsUsing one of these technologies does not mean that the other cannot be used. In fact, IDS and IPS technologies can complement each other. For example, IDS can be implemented to validate IPS operations because IDS can perform more in-depth packet inspection in an offline manner. This allows IPS to focus more on those fewer, but very important, online traffic patterns.The decision on which implementation to use depends on the organization's security goals as specified in the network security policy.5.1.2 Network-based IPS Implementation5.1.2.1 Network IPS Sensors Network IPS can be implemented using a dedicated IPS appliance, such as the IPS4200 series, or can be attached to a 1SR router, ASA firewall appliance, or Catalyst 6500 switch. Network-based IPS implementations are a key component of intrusion prevention, and while host-based IDS/1PS solutions are available, they must be integrated with network-based IPS implementations to ensure a robust security architecture.Sensors detect malicious and unauthorized behavior in real time and can take action when needed. Sensors are deployed at designated network points with security management enabled to monitor network activity as it occurs, regardless of the location of the target of the attack.124 Chapter 5 Implementing Intrusion Prevention Sensors can be implemented in a number of ways.An ISR router with/without an IPS Advanced Integration Module (AIM) or Network Module Enhancement (1PSNME).An ASA firewall appliance with/without the Advanced Detection and Prevention Security Services Module (ASAAIPSSM). Added to a Catalyst 6500 switch using the Intrusion Detection System Service Module (IDSM-2).