You are the security administrator for a large enterprise network with many remote locations. You havebeen
given the assignment to deploy a Cisco IPS solution. Where in the network would be the best place to deploy
Cisco IOS IPS?
A.
inside the firewall of the corporate headquartersInternet connection
B.
at the entry point into the data center
C.
outside the firewall of the corporate headquarters Internet connection
D.
at remote branch offices
http://www.cisco.com/c/en/us/products/collateral/security/ios-intrusion-prevention-system-ips/prod_white_paper0900aecd8062acfb.html
Here is the answer:
Cisco IOS Intrusion Prevention System (IPS) is an inline, deep-packet-inspection-based feature that enables Cisco IOS Software to effectively mitigate a wide range of network attacks. While it is common practice to defend against attacks by inspecting traffic at the data centers and corporate headquarters, it is also critical to distribute the network-level defense to stop malicious traffic close to its entry point at the branch or telecommuter offices.
……………….
Eliminates the need for a standalone IPS device at branch and telecommuter offices as well as small and medium-sized business networks
0
0