CCNP Security IPS 642-627 Official Cert Guide > Configuring Cisco IPS Signature Engines and the Signature Database > Deploying SERVICE Signature Engines

Table of Contents

Download Safari Books Online apps: Apple iOS | Android

Entire Site

Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

This Book

CCNP Security IPS 642-627 Official Cert Guide

Search

About the Authors

About the Technical Editor

Acknowledgments

Command Syntax Conventions

Introduction

About the 642-627 IPS v7.0 Exam

About the CCNP Security IPS v7.0 642-627 Official Cert Guide

Pt. I. Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices

Pt. II. Installing and Maintaining Cisco IPS Sensors

Pt. III. Applying Cisco IPS Security Policies

Ch. 8. Configuring Basic Traffic Analysis

Ch. 9. Implementing Cisco IPS Signatures and Responses

Ch. 10. Configuring Cisco IPS Signature Engines and the Signature Database

Overview

“Do I Know This Already?” Quiz

Foundation Topics

Using Cisco IPS Signature Engines and Configuring Common Signature Engine Parameters

Deploying ATOMIC Signature Engines

Deploying STRING Signature Engines

Deploying SERVICE Signature Engines

Deploying FLOOD Signature Engines

Deploying SWEEP Signature Engines

Deploying the META Signature Engine

Deploying the NORMALIZER Engine

Deploying Other Engines

Summary

References

Exam Preparation Tasks

Review All the Key Topics

Complete the Tables and Lists from Memory

Definitions of Key Terms

Ch. 11. Deploying Anomaly-Based Operation

Pt. IV. Adapting Traffic Analysis and Response to the Environment

Pt. V. Managing and Analyzing Events

Pt. VI. Deploying Virtualization, High Availability, and High-Performance Solutions

Pt. VII. Configuring and Maintaining Specific Cisco IPS Hardware

Pt. VIII. Final Exam Preparation

Pt. IX. Appendixes

Index

Deploying SERVICE Signature Engines

The SERVICE signature engines reassemble OSI Layer 4 sessions, decode application layer protocols, and analyze protocol and data units in the decoded stream. This provides inspection for numerous network protocols, such as Domain Name System (DNS), FTP, and HTTP.

The Cisco IPS Sensor Software uses the following SERVICE signature engines:

You are currently reading a PREVIEW of this book.

Get instant access to over
$1 million worth of books and videos.

Start a Free Trial

Download Safari Books Online apps: Apple iOS | Android

This Book

Search

Contents

Chapter 10. Configuring Cisco IPS Signat... > Deploying SERVICE Signature Engines

Deploying SERVICE Signature Engines