CCSP Self-Study: CCSP IPS Exam Certification Guide

Chapter 9. Cisco IPS Response Configuration

This chapter covers the following subjects:

• Cisco IPS response overview

• Inline actions

• Logging actions

• IP blocking

• Configuring IP blocking

• Manual blocking

• TCP reset

The heart of the Cisco IPS is the signatures that the sensor uses to identify intrusive traffic on your network. Each signature can be configured to perform numerous actions whenever the signature fires. Configuring signature responses is vital to efficiently using your Cisco IPS sensors to protect your network.

Besides detecting specific traffic on your network, you can configure numerous actions that the sensor will perform when a signature triggers. These actions vary from simply generating an alert to logging network traffic to denying traffic ...