ASA/PIX, IDS, IPS, VPN, Cisco Secure ACS, AAA, ISE.
muralidm
New Member
Posts:
2
Joined:
Mon Nov 28, 2011 3:48 am
Certs:
ccsp

Difference between Antivirus and IPS

Sat Mar 10, 2012 4:05 am

If I have an updated Antivirus in my network, do you still recommend having IPS installed in my network?

rc172
Member
Posts:
213
Joined:
Sun Apr 17, 2011 3:28 pm
Certs:
CCSP/CCNP:Security GIAC GPEN

Re: Difference between Antivirus and IPS

Sat Mar 10, 2012 10:44 pm

IPS will pick out things that AV wont flag like SQL attacks on a web server or scanning behavior. There may be a small amount of overlap in that IPS could find a signature for a well known virus and knock it out in transit but for the most part they go after different things.

Now is it recommend? Well its certainly not a bad thing to have but its really something you have to decide for yourself. Is what you are trying to protect important enough to warrant another layer of defense? Is it required for any compliance reasons? Is the risk of not having it acceptable?
The Cubicle Wizard
http://cubiclewizard.blogspot.com/

'

Return to Cisco Security

Who is online

Users browsing this forum: Exabot [Bot], tuga and 18 guests