Cisco NME IPS Intrusion Prevention System

Cisco NME IPS Intrusion Prevention System

The Cisco Intrusion Prevention System Network Module Enhanced (IPS NME) bring integrated intrusion prevention to enterprise branch offices and expand network security to the edge.

The Cisco IPS NME for the Cisco 2811, 2821, 2851, 3825, 3845, 2911, 2921, 2951, 3925 and 3945 Integrated Services Routers bring Cisco IPS to branch offices and small businesses. Cisco IPS is an integral component of the Cisco Self-Defending Network, an architectural solution designed for the evolving security landscape. Security is integrated everywhere, and with the help of a lifecycle services approach, enterprises can design, implement, operate, and optimize network platforms that defend critical business processes against attack and disruption, protect privacy, and support policy and regulatory compliance controls.

With the ever-increasing complexity and sophistication of security threats, every point in the network can be at risk. Cisco IPS accurately identifies, classifies, and stops malicious traffic, including worms, spyware, adware, network viruses, and application abuse. Vigilant protection helps ensure business continuity and minimizes the effect of costly intrusions.

Specifications

By integrating IPS and branch-office routing, Cisco integrated services routers can secure remote branch-office networks from threats originating from the Internet and reduce the WAN link overload from infected hosts at the branch office. The integration of IPS into the branch-office router provides numerous important customer benefits:

• Dedicated processor to maximize performance: IPS AIM and IPS NME have their own CPUs and DRAMs for all IPS functions. They offload router CPU from processor-intensive tasks such as deep packet inspection from the host router.
• Performance: The Cisco IPS AIM and IPS NME can monitor up to 45 and 75 Mbps of traffic, respectively, and are suitable for T1/E1 and up to T3 environments.
• Inline and promiscuous modes: Both inline and promiscuous IPS inspection modes are supported. Inline mode places the IPS module in the packet path and can be configured to drop violated packets.
• Common management tool for Cisco IPS solution: The Cisco IPS AIM and IPS NME support Cisco Security Manager, the same management tool the Cisco IPS 4200 Series Sensors supports, allowing you to use one centralized management system for both appliance and router sensors.
• Flexibility in monitoring interfaces: The Cisco IPS AIM and IPS NME connect directly to the router backplane and can monitor packets coming in and going out of any router interface, including T1, T3, DSL, ATM, Fast Ethernet, and Gigabit Ethernet.
• In-band management (AIM only): An internal Gigabit Ethernet port is used for in-band management of the Cisco IPS AIM command-line interface (CLI) and also for the web-based management application, Cisco IPS Device Manager. You can access the IPS AIM through the router console port or through the Secure Shell (SSH) Protocol to any Layer 3 interface. No physical management port is required.
• Out-of-band management (NME only): If you require a separate network for device management, the Cisco IPS NME has an external Gigabit Ethernet port dedicated for console and web-based device manager access.
• Physical space savings: The Cisco IPS AIM and IPS NME plug into the integrated services router and save valuable real estate in the wiring closet.
• Reduced downtime (NME only): The NME slot(s) on modular integrated services routers are externally accessible and make field installation and replacement very simple. In addition, the Cisco 3945 Integrated Services Router supports online insertion and removal (OIR), which facilitates replacement of like-to-like modules without any power cycle, minimizing the mean time to repair and increasing the overall availability of the router.
• Simple power and cable management: Cisco IPS AIM and IPS NME take advantage of the power options of the router, including DC power and redundant power.
• Security in depth: The Cisco IPS AIM and IPS NME interoperate with security and WAN optimization features such as VPN, firewall, Network Address Translation (NAT), Web Cache Control Protocol (WCCP), and Cisco Wide Area Application Services (WAAS) as well as all common Cisco IOS Software functions.