CCNP Security Secure 642-637 Quick Reference

Chapter 4. Cisco IOS IPS

It is common for networks to be protected by a firewall, a device that limits communication from an untrusted network zone to the trusted network zone. Firewalls make decisions whether to permit or disallow traffic from one network to another based on the rules configured in the firewall rule base or security policy. This rule base consists of firewall rules that normally look at the source IP address, destination IP address, and destination port to make its decision.

Intrusion prevention is a technology based on intrusion detection, which was the initial technology that detected and reported on network-level attacks. Intrusion Prevention Systems (IPS) offer a more proactive approach and include advanced blocking techniques ...