CCSP Self-Study: Cisco Secure Intrusion Detection System (CSIDS)

Appendix A. Cisco Intrusion Protection Solution Tuning: Case Studies

The Cisco intrusion protection solution incorporates numerous devices, products, and features. Understanding all of these components can be a very challenging task. Therefore, this appendix includes various case studies to help illustrate some of the key concepts that you need to understand to effectively use the Cisco IPS to provide a strong security foundation to protect your network. The following case studies are examined in this appendix:

• Deploying sensors on your network scenario

• Blocking and TCP reset using IDSM-2 scenario (CatIOS)

• Multi-IDSM-2 scenario (CatOS)

• Custom signature scenario

• Signature tuning scenario

Sensor Deployment: Network Scenario

Increasingly, computer networks ...