Course Details

Previous Page

Cisco IINS 2.0: Implementing IPS

Target Audience
Expected Duration
Lesson Objectives
Course Number

Intrusion detection system (IDS) and intrusion prevention system (IPS) solutions form an important part of a robust network defense solution. Maintaining secure network services is an essential requirement of a profitable IP-based business. This course defines intrusion prevention architectures, and introduces the underlying technologies and recommended practices for their deployment. Configuring the Cisco IOS Intrusion Prevention System (IPS) is a core competency for a network security administrator. This course describes how to configure Cisco IOS IPS on routers using Cisco Configuration Professional. The course includes a description of the building blocks of Cisco IOS IPS, its deployment options, and guidelines for signature tuning.

Target Audience
Network designers, administrators, engineers, and managers; systems engineers; individuals seeking the Implementing Cisco IOS Network Security (IINS) v2.0 640-554 certification, which is associated with the CCNA Security certification exam. Knowledge and skills equivalent to those learned in Interconnecting Cisco Networking Devices Part 1 (ICND1) are required, and a working knowledge of the Windows operating system and Cisco IOS networking and concepts is recommended.

Expected Duration (hours)

Lesson Objectives

Cisco IINS 2.0: Implementing IPS

  • compare and contrast IDS and IPS
  • recognize the advantages of deploying the IPS and IDS platforms
  • match intrusion detection techniques to advantages
  • recognize how IPS responds to attack
  • match evasion methods to IPS antievasion features
  • identify considerations for implementing alarms in IPS signatures
  • recognize the need for IPS alarm monitoring and options for event managers
  • identify the recommended practices in deploying IPS
  • recognize Cisco IOS IPS signature features
  • identify support for SDEE and Syslog in the Cisco IOS IPS solution
  • recognize how to work with signature files
  • recognize the steps for downloading Cisco IOS IPS signature package to a local PC
  • identify the tasks to verify the configuration of Cisco IOS IPS signature package
  • use the Cisco IOS IPS Rule Wizard to make a router and IPS sensor
  • Course Number: