Cisco Cisco IOS Software Release 12.4(24)T Fascicule
© 2008 Cisco Systems, Inc. All rights reserved.
35
Intrusion Prevention System (IPS)
Enhanced Network Module
Enhanced Network Module
Incorporates Network Admission
Control (NAC) appliance server
Control (NAC) appliance server
Enforces security policies,
Scans for latest anti-virus software
Prevents unauthorized access and
spread of viruses on the network
spread of viruses on the network
Supports wired, wireless and guest NAC
Integrated into Cisco ISRs
Provides size and scale ideal for
remote offices (<100 users)
Works with NAC appliances at
headquarters in a network system
headquarters in a network system
Benefits of router integration
Systems Integration
Lower Operating Costs
Inline and promiscuous Intrusion
Prevention (IPS)
Prevention (IPS)
Same software (CIPS 6.1) and features
as Cisco IPS 4200
Performance Improvement by hardware
acceleration
Dedicated CPU and DRAM to offload host CPU
Device management: Cisco IPS Device
Manager (IDM), Cisco Configuration
Professional (CCP); Network wide
management through Cisco Security
Manager (CSM)
Professional (CCP); Network wide
management through Cisco Security
Manager (CSM)
IPS Manager Express (IME) and CS-
MARS on event monitoring and
correlation
MARS on event monitoring and
correlation
NME-IPS-K9
Supported on Cisco 2811,
2821, 2851, and 3800 Series
Routers
2821, 2851, and 3800 Series
Routers
Requires IOS Advanced
Security image or higher
Security image or higher
Accelerated Threat
Control for Cisco ISR
Control for Cisco ISR
Hardware