Additional IPS Features

Summary

This chapter covered how Cisco ASA integrates and enhances the firewall, IDS, and IPS features. A detailed introduction to the AIP-SSM IPS capabilities was provided. Legacy IDS/IPS features were also discussed. Cisco ASA has the ability to integrate all of these features while blending the use of pattern matching, stateful-pattern matching, protocol decodes, and heuristic-based signatures, making the security appliance a very robust security system.