Key Features and Benefits
- High performance: IPS capabilities are hardwareaccelerated to provide maximum performance, and do not negatively affect firewall or VPN throughput.
- Full IPS protection: The Cisco ASA 5500 Series IPS Solution offers full IPS protection. It supports the same intrusion prevention software found in Cisco IPS 4200 Series Sensors.
- Global Correlation: Part of Cisco IPS Sensor Software 7.0, IPS with Global Correlation provides real-time updates on the global threat environment beyond the perimeter, enabling your sensors to detect more threats, detect them earlier and more accurately, and protect critical assets from malicious attacks. With global correlation, your security definitions are updated every 15 minutes, so you always have the most current protection available.
- Reputation technology: Using market-leading reputation technology backed by Cisco Global Correlation, you are proactively protected from known malicious users who attempt to gain access to your critical assets.
- Comprehensive and timely attack protection: Through signature updates provided by a global security intelligence team working 24 hours a day, your critical assets and services are secured.
- Zero-day attack protection: Cisco anomaly detection provides powerful protection against day-zero attacks. It learns the normal behavior on your network and alerts you when it sees anomalous activities in your network. Thus, you are protected against new threats even before signatures are available.
- Wireless protection: Tight integration between the Cisco ASA 5500 Series IPS solution and the Cisco Wireless LAN Controller helps ensure that intruders do not enter your wireless network.
- Unified Communications protection: Strong protection of voice-over-IP (VoIP) protocols, Cisco Unified CallManager, and devices provides maximum uptime of your critical voice network.
- Advanced policy provisioning with Modular Policy Framework: The Cisco Modular Policy Framework provides a powerful mechanism to assign Cisco ASA firewall, VPN, and IPS policies in one place. With the Cisco Modular Policy Framework, the Cisco ASA firewall passes traffic to the AIP SSM for inspection on a flow-by-flow, as-needed basis for simplified management.
- Cisco IPS policy provisioning: With Risk Rating–based IPS policy provisioning, you assign IPS policies based on risk, instead of tuning individual signatures. All events are assigned a Risk Rating number between 0 and 100 based on the risk level of the event. Based on the Risk Rating, different policy actions can be assigned, including drop packet, alarm, and log.
- Cisco IPS Manager Express: Cisco IPS Manager Express is a powerful yet easy-to-use all-in-one IPS management application for as many as ten IPS sensors. With built-in provisioning, monitoring, troubleshooting, and reporting capabilities, Cisco IPS Manager Express simplifies IPS deployment and management.
|