Bypass mode of the Cisco IPS system

Source: Internet
Author: User

Bypass mode of the Cisco IPS system


If an IPS problem or fault occurs, especially when IPS work in traversing mode, this will cause problems to the entire network, sometimes even catastrophic, therefore, you must define the processing behavior of data traffic when an IPS fault occurs, as shown in Figure 5.4. If an IPS fault occurs, the best solution is to pass the traffic directly, the Cisco IPS system provides three key options for bypass:


650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/0519493C7-0.png "title =" 1.png"/>

BypassKey options:

ÜAuto:Automatic mode, which is determined by three factors. When the link is down or up, It is bypass, when the traffic starts or stops, and when it reaches the parameters defined by traffic flow configurications, the default value is auto.

ÜOff:Disable the bypass function. All data traffic must be analyzed before it can be passed. Even if an IPS problem occurs, do not pass the data traffic. This is an extreme behavior, it is usually used in an environment with high traffic security detection. It is called "the essence is better than the whole ".

ÜOn:Enable the bypass function to indicate that no data streams are analyzed. You can directly use IPS, or directly use bypass.


This article is from the "unknown Christ" blog. For more information, contact the author!

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.