subject: Cisco Ccnp Iscw Certification - The Key Difference Between Ips And Ids [print this page] ISCW has given a brand new look to the certification of Testking 642-515 Cisco CCNP; the exam covers details of configuring and troubleshooting prevention system as well as security device manager. The foremost thing to be cleared is the different between IPS (Intrusion Prevention System) and IDS (Intrusion Detection System). Both of them seem if they are similar but the fact is they are completely different in operation. IDS, is all about how to detect network intrusion; it is just to inform other devices about attack but it just cant defend against the attack itself. It even cant receive traffic directly but the traffic flow is mirrored to it. If the infected packets do not affect the network then it is responsibility of IDS to check and take proper action. The setback is that this proper action is not direct action; since the IDS is not in the traffic flow, it has to notify a network device that is in that flow that action should be taken.
It is a layered security approach and in fact it is the solution to protecting any size of network. By bringing an IPS or IDS to the perimeter layer of the network, traffic gets analyzed for untrusting activity. Even if both IDS as well as IPS perform parallel actions, the distinction is in their network placement.
An IDS device is passive and it observes packets of data travel through the network from a supervising port. By the time the IDS observes a problem and lets the appropriate network devices know, the starting out of the infected traffic flow is by now in the network. On the contrary, our Intrusion Prevention System (IPS) does assemble in the center of the traffic flow - in this situation; the IPS would actually be the Testking 642-262 Cisco router. When the IPS discovers a problem, the IPS itself can put a stop to the traffic from entering the network.
The official website of Testking 642-374 Cisco depicts the IPS as a "restructuring" of the IDS. At the same time, you would see more of IPS than IDS in today's real-world networks; we have to be crystal clear on the differences between the two for the ISCW Testking 312-50 exam. It is important to make it sure that you are familiar with configuring IPS from the command line as well as by using SDM.
