Cisco ios ips

Hi,

Do any of you guys run IOS based IPS and if so how do you get on with it. I am interested how it would compare to something like Tipping point.

Our edge routers do very little apart from running BGP, so cost savings could be had by upgrading the feature set to run IPS on the routers and not purchase new separate IPS solution.

Worth considering or best just to go for a separate solution?

Find more posts tagged with

Comments

emerald_octane

We had a subscription but I Just couldn't get it working on our ISR. I think the signatures for IOS and ASA are the same, but the throughput would be much higher on the ASAs.

DevilWAH

Any idea what the throughput would be on a 3945 ISR.

Iristheangel

Ekk... That's going to depend on what other services you have running on that router. If you're using DMVPN, CBAC, and a bunch of other services, it's going to slow that thing down. I'm sure I could find the advertised throughput on some white paper but it also can depend on what else you have running on that router.

DevilWAH

I been looking but not really found any thing in black and white. All it has running is BGP, and has a route to the inside networks and a default route out of site. The basically do bugger all

. We where given them, is the only reason we have them.

DevilWAH

OK found it

https://supportforums.cisco.com/sites/default/files/legacy/0/5/3/78350-white_paper_c11_595485.pdf