Cisco Security Setup & Configuration: Part 3 – Network & Host-Based IPS

IPS/HIPS provide for an increased level of protection not available from a static access list or stateful firewall inspection. IPS and HIPS offer security by sensing abnormalities in traffic communications or protocol, and packet behaviors that are known to have malicious objectives. Here are some recommendations for installing and hardening your IPS sensors: