What Is the Cisco IOS Firewall IDS?
The IOS IDS is part of the IOS Firewall features and performs similar functions, if not the exact same functions, as the Cisco IDS appliance and the Cisco IDS module. The basics of a Cisco IDS device are that it analyzes packets that pass by an interface. Those packets are analyzed by the IDS device against a set of predefined signatures that Cisco builds. Cisco actually has a group that is responsible for developing these signatures that are used with packet analysis. This group is called the Cisco Countermeasures Response Team (CCRT).
When you think of a signature, what comes to mind? Maybe it is something that is used to identify people. Maybe this thought also comes to mind: A signature is a unique pattern ...
Get SECUR Exam Cram™ 2 (Exam 642-501) now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
