[c-nsp] ISR IPS module

Jay Nakamura zeusdadog at gmail.com
Mon Feb 8 12:55:51 EST 2010


Has anyone used these cards on ISRs?

https://www.cisco.com/en/US/prod/collateral/routers/ps5853/ps5875/product_data_sheet0900aecd806c4e2a_ps2641_Products_Data_Sheet.html

Any opinions?  How effective is it?  Is it worth using?

Also, what is your opinion on doing IPS without the hardware card on
an ISR?  My experience is it boggs down the router too much and you
have to be so careful about what to include in scanning that it wasn't
worth the effort.  But that was before Cisco changed the signature
format and how it scanned traffic at around 12.4(11)T.


More information about the cisco-nsp mailing list