Cisco Blogs


Cisco Blog > Security

Global Correlation: IPS + SIO = Greater Protection

The Cisco Intrusion Prevention System (IPS) includes Global Correlation capabilities that utilize real-world data from Cisco Security Intelligence Operations (SIO). We have seen on this blog before how IPS Global Correlation can be used to detect and validate the urgency of emergent threats as well as allow our team to hone the protection capabilities of our IPS Sensors.

Perhaps more fundamentally however, Global Correlation allows Cisco IPS Sensors to filter network traffic using the “reputation” of a packet’s source IP address. The reputation of an IP address is computed by Cisco SensorBase using the past actions of that IP address. IP reputation has been an effective means of predicting the trustworthiness of current and future behaviors from an IP address.

Our team has recently published a new white paper that explores the benefits of IPS Global Correlation and how they relate to various IPS deployment scenarios. I would like to share a couple of items from the white paper and encourage you to read it for more information.

Read More »

Tags: , , ,

Lock It Down or Free It Up?

March 1, 2012 at 12:54 pm PST

On February 29th, Christopher Young, Senior Vice President of Cisco Security, delivered a rousing keynote address at the RSA 2012 conference in San Francisco.

The title and theme of his presentation, “Lock it Down or Free it Up?”, spoke to the dilemma organizations of all sizes face every day. Read More »

Tags: , , , , , , , ,

Cisco IPS Signature Retirement and the Default Configuration

Walter Sulym from the Cisco IPS team explains the signature retirement process and how the default configuration is determined.

Tags: ,

Cisco IPS Sensor Default Signature Configuration Modifications

The threat landscape is an ever evolving environment that must be addressed with constant iteration. Since the Cisco Intrusion Prevention System signature configuration has grown over the past few years, the Cisco Security Research and Operations IPS Signature Development Team performed an exhaustive review of the default IPS signature settings currently shipping. As a result of that analysis, the team will be releasing changes to the default signature set via signature updates in a two-phase process over the course of several months.

Read More »

Tags: , ,

Fundamentals of High End Firewalls

November 29, 2011 at 4:25 pm PST

We had fun turning out a few new security oriented fundamentals that we always hope you enjoy.  This one firewall animation is very complimentary to a full TechWiseTV show we recently released..you can see it embedded just after the jump.  Nothing in networking is ever really an apples to apples comparison but it seems like firewall vendors are more full of hot air than anyone.   Read More »

Tags: , , , , , , , ,