Editor's Notes
- #6: 5.1.1.1 Zero Day Attacks
- #7: 5.1.1.2 Monitor for Attacks
- #8: 5.1.1.3 Detect and Stop Attacks
- #9: 5.1.1.4 Similarities Between IDS and IPS
- #10: 5.1.1.5 Advantages and Disadvantages of IDS and IPS
- #12: 5.1.2.1 Host-Based and Network-Based IPS
- #13: 5.1.2.2 Network-Based IPS Sensors
- #14: 5.1.2.3 Cisco’s Modular and Appliance-Based IPS Solutions, Figures 1 - 4 5.1.2.4 Cisco’s Modular and Appliance-Based IPS Solutions (Cont.)
- #15: 5.1.2.5 Choose an IPS Solution
- #16: 5.1.2.6 IPS Advantages and Disadvantages
- #17: 5.1.2.7 Modes of Deployment
- #19: 5.1.3.1 Port Mirroring
- #20: 5.1.3.2 Cisco SPAN
- #21: 5.1.3.3 Configuring Cisco SPAN Using Intrusion Detection
- #24: 5.2.1.1 Signature Attributes
- #25: 5.2.1.2 Signature Types
- #26: 5.2.1.3 Signature File
- #27: 5.2.1.4 Signature Micro-Engines
- #28: 5.2.1.5 Acquire the Signature File 5.2.1.6 Activity – Identify IPS Signature Type
- #30: 5.2.2.1 Signature Alarm
- #31: 5.2.2.2 Pattern-Based Detection
- #32: 5.2.2.3 Anomaly-Based Detection
- #33: 5.2.2.4 Policy-Based and Honey Pot-Based Detection
- #34: 5.2.2.5 Benefits of the Cisco IOS IPS Solution
- #35: 5.2.2.6 Alarm Triggering Mechanisms 5.2.2.7 Activity – IPS Signature Alarms
- #37: 5.2.3.1 Signature Actions
- #38: 5.2.3.2 Manage Generated Alerts
- #39: 5.2.3.3 Log Activities for Later Analysis
- #40: 5.2.3.4 Deny the Activity
- #41: 5.2.3.5 Reset, Block, and Allow Traffic 5.2.3.6 Activity – Identify the IPS Signature Action
- #43: 5.2.4.1 Monitor Activity
- #44: 5.2.4.2 Monitoring Considerations
- #45: 5.2.4.3 Secure Device Event Exchange
- #46: 5.2.4.4 IPS Configuration Best Practices
- #48: 5.2.5.1 Cisco Global Correlation
- #49: 5.2.5.2 Cisco SensorBase Network
- #50: 5.2.5.3 Cisco Security Intelligence Operation
- #51: 5.2.5.4 Reputations, Blacklists, and Traffic Filters 5.2.5.5 Reputations, Blacklists, and Traffic Filters (Cont.)
- #52: 5.2.5.4 Reputations, Blacklists, and Traffic Filters 5.2.5.5 Reputations, Blacklists, and Traffic Filters (Cont.)
- #55: 5.3.1.1 Implement IOS IPS
- #56: 5.3.1.2 Download the IOS IPS Files 5.3.1.3 IPS Crypto Key 5.3.1.4 Enable IOS IPS 5.3.1.5 Load the IPS Signature Package in RAM
- #57: Page 5.3.1.3
- #58: Page 5.3.1.4
- #59: Page 5.3.1.4 (cont.)
- #60: 5.3.1.5 Load the IPS Signature Package in RAM
- #61: 5.3.1.5 Load the IPS Signature Package in RAM (Cont.) 5.3.1.6 Activity – Implementing IPS
- #62: 5.3.2.1 Retire and Unretire Signatures
- #64: 5.3.2.2 Change Signature Actions
- #66: 5.3.3.1 Verify IOS IPS
- #67: 5.3.3.2 Report IPS Alerts
- #68: 5.3.3.3 Enable SDEE
- #69: 5.4.1.1 Packet Tracer – Configure an IOS IPS Using CLI 5.4.1.2 Lab – Configure an IOS IPS Using CLI
- #71: https://www.netacad.com