ccna 5.1.1.6 lab answers

ccna 5.1.1.6 lab answers.5.2.5.4 Secure Device Event ExchangeThe IPS sensors and CiscoIOSIPS generate alerts when enabled features are triggered. These alerts are stored in the sensor and can be viewed locally or through a management application (such as IPSManager Express). -Once an attack signature is detected, the CiscoIOSIPS feature sends syslog messages or alerts in the Secure Device Event Exchange (SDEE) format. The SDEE format was developed to refine event communication generated by security devices, and it is primarily used for event communication for IDS, but the protocol is intended to be extended to allow the inclusion of additional event types. Cisco configuration specialists can monitor system logs and SDEE-generated events and keep track of alerts, which are common SDEE system messages, including IPS feature alerts. An SDEE system alert message type has the following format.%IPS-4.SIGNATURE:Sig:1107 Subsig:0 Sev:2 RFC1918 address [192.168.121.1:137 -> 192.168.121.255:137]5.2.5.5 IPS Configuration Best PracticesManaging features on many IPS devices can be difficult. To improve the efficiency of IPS management in your network, consider using these recommended configuration best5.2 IPS Features 135Best Practices. When upgrading the latest feature package for sensors, it is important to balance momentary downtime, as the network becomes vulnerable during this period. When deploying a large number of sensors. to automatically upgrade feature packages rather than manually for each sensor. This will give security operators more time to analyze events. When a new feature package becomes available, download them to a secure server within the management network. Use another IPS to protect this server from outside attacks.Place the feature packets on a dedicated SFTP server within the management network. If a feature update is not available. you can create a custom feature to detect and mitigate specific attacks.Configure the SFTP server to allow only read-only access to the directory where the feature packet is stored.