27-1
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
CHAPT ER
27
Cisco IOS IPS
The CiscoI OS Intrusion Prevention System (Cisco IOS IPS) allows you to
manage intrusion prevention on routers that use Cisco IOS Release 12.3(8)T4 or
later releases. Cisco IOS IPS lets you monitor and prevents intrusions by
comparing traffic against signatures of known threats and blocking the traffic
when a threat is detected.
Cisco SDM lets you control the application of Cisco IOS IPS on interfaces, import
and edit signature definition files (SDF) from Cisco.com, and configure the action
that Cisco IOS IPS is to take if a threat is detected.

IPS Tabs

Use the tabs at the top of the IPS window to go to the area where you need to work.
•Create IPS—Click to go to the IPS Rule wizard to create a new Cisco IOS IPS
rule.
•Edit IPS—Click to edit Cisco IOS IPS rules and apply or remove them from
interfaces.
•Security Dashboard—Click to view the Top Threats table and deploy
signatures associated with those threats.
•IPS Migration—If the router runs a Cisco IOS image of release 12.4(11)T or
later, you can migrate Cisco IOS IPS configurations created using earlier
versions of the Cisco IOS.