Cisco Cisco IPS 4255 Sensor 白書
White Paper
All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 1 of 3
Cisco IPS Performance
Measuring and testing performance on Intrusion Prevention Systems requires both an
understanding of the characteristics of the network environment targeted in the IPS
deployment, as well as an awareness of the challenges in building an effective test
methodology for a sophisticated traffic inspection technology. This document describes
the Cisco IPS philosophies and methodologies for characterizing IPS performance.
Delivering Performance
Cisco IPS Sensors are designed to meet the rigors of a broad range of applications and network
use. In today’s contemporary enterprise, applications are leveraging the Internet as never before.
Voice over IP, E-Commerce, streaming video and Web 2.0 enable higher productivity and
employee collaboration. These networked applications pose different and varying demands on
resources such as connection rates, concurrent connections, flow length, transaction size etc.
From a performance perspective, there is a spectrum of application types ranging from media-rich
environments that feature converged content to highly transactional environments populated by
rapid-fire, lightweight connections.
Cisco IPS technology evaluates a diverse suite of metrics in both “media-rich” and “transactional”
environments, enabling you to anticipate true IPS performance based on the unique
characteristics of your real-world environment.
Media-Rich
Media-rich environments are characterized by content. Content seen on most popular Websites
falls on the media-rich end of the spectrum, as do video content and file transfers. If your
environment is driven by access to large amounts of data and converged, immersive experiences,
your environment is more media-rich.
Transactional
Transactional environments are characterized by connections. Many types of e-commerce
environments fall on this end of the spectrum, as can instant messaging and voice. If your
environment is driven by connection-intensive applications and small transaction sizes, your
environment is more transactional.