Cisco Cisco IPS 4520 Sensor Guida Informativa
Q&A
© 2012 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 1 of 3
The Cisco
®
IPS 4300 Series
Q. What is the Cisco IPS 4300 Series?
A. The Cisco IPS 4300 Series is a family of 1-rack-unit intrusion prevention sensors delivering more than 1 Gbps
of context-aware inspection. The IPS 4300 Series comprises two appliances - the IPS 4345 and IPS 4360,
which provide 750 Mbps and 1.25 Gbps of real-world inspection, respectively.
Q. What are the benefits of the Cisco IPS 4300 Series?
A. The Cisco IPS 4300 Series provides high-performance, hardware-accelerated, context-aware intrusion
prevention in a compact form factor. Its architecture enables it to scale to meet the performance requirements
of a wide range of network deployments - from small branch offices to medium-sized enterprises and campus
environments.
Q. What are the inspection and prevention capabilities of the Cisco IPS 4300 Series?
A. The Cisco IPS 4300 Series sensors use the same advanced IPS capabilities available on all Cisco IPS
sensors. Cisco IPS Sensor Software Version 7.1 or later provides a comprehensive set of advanced
inspections and signatures for known vulnerabilities, as well as next-generation features such as global
correlation and reputation-based filtering.
Q. How does the Cisco IPS 4300 Series compare with the Cisco IPS 4200 Series?
A. The Cisco IPS 4300 Series represents a dramatic step forward for the Cisco IPS product line. The Cisco IPS
4200 Series is based upon legacy architecture without hardware acceleration. The Cisco IPS 4300 Series is
built upon enterprise-class processors with dedicated IPS acceleration hardware, all within a 1-RU chassis.
This combination delivers up to four times the performance density of the IPS 4200 Series. However, both
series share the same management plane, which makes policy configuration, event management, reporting,
and health and performance consistent across the products.
Q. Does the Cisco IPS 4300 Series support fail open?
A. Yes. The Cisco IPS 4300 Series provides software fail open.
Q. What is the latency?
A. Average latency for the 4360 and 4345 is less than 150
µ
.
Q. I already have a Cisco Adaptive Security Appliance (ASA) with IPS. Why do I need a Cisco IPS 4300 Series?
A. Cisco ASA with IPS offers a combination of features, including firewall, VPN termination, and intrusion
prevention. Both the ASA IPS and the Cisco IPS 4300 Series share a common IPS code base. However, the
Cisco IPS 4300 provides greater performance density and deployment flexibility (e.g. SPAN deployments, fail
open, etc.) than the ASA IPS product line.
Q. What software version is available on the Cisco IPS 4300 series?
A. The Cisco IPS 4300 Series currently ships with the Cisco IPS Sensor Software Release 7.1(3) E4 image,
which is also available for download.
Q. What can I use to manage the Cisco IPS 4300 Series?
A. Several options are available to manage the Cisco IPS 4300 Series sensors: