CCNP Security IPS 642-627 Quick Reference, Second Edition

Chapter 4. Advanced Configurations

Advanced Tuning

You may need the following types of information before you begin advanced tuning:

• Network topology

• Network address space

• Which inside addresses are static and which are Dynamic Host Configuration Protocol (DHCP)

• Which inside addresses are owned, but not used

• Operating systems running on the servers

• Applications running on servers

• Overall security policy

Sensor Configurations

The location of the sensor is important for tuning considerations. The nature of the traffic that the sensor monitors will vary, and so will the security policy that the sensor interacts with. Some organizations place the intrusion prevention system (IPS) sensor outside the firewall, for example, and others ...