CCNP Security IPS 642-627 Official Cert Guide

Chapter 3. Network IPS Traffic Analysis Methods, Evasion Possibilities, and Anti-evasive Countermeasures

This chapter covers the following topics:

• Various Network IPS Traffic Analysis Methods: Different types of traffic and patterns require various methods of analysis to properly provide the necessary countermeasures.

• Various Network Evasion Attacks: Methods used to evade intrusion prevention systems or traffic-filtering techniques.

• Choosing the Appropriate Anti-evasion Countermeasures: Methods to counter the methods of evasion.

Overview

Cisco and third-party intrusion prevention system (IPS) sensors use a variety of techniques to analyze network traffic to optimally detect suspicious and malicious traffic. This chapter covers the methods ...