Ips

ahmedahmed

I installed Zone Based Firewall, and want to install IPS on my cisco 2911 router. I have installed IPS using CCP before but my issue is does the IPS come preconfigured with some default settings: or is that that I must tweak it to my setting?

bryguy

Assuming you've run through the default IPS setup, defined the traffic you want to inpsect on the router, and you're running in inline mode the IPS will deny packets inline whose signatures have a high risk rating, by default. Otherwise, you'll want to tweak your IPS, specifically to your environment in order to find the right balance between false positives, and false negatives.