Summary

This section highlights the key topics discussed in this chapter:

• The virtual IPS sensors mentioned in this chapter reside on physical sensors, and they are not virtual machines.

• The virtual IPS sensor is a packet-processing policy whose engine has been virtualized.

• All Cisco IPS sensors support virtualization except the Cisco ASA AIP SSC-5, AIM-IPS, and NME-IPS.

• The IPS sensors that support virtualization support a maximum of four sensors.

• You can separate signature sets, event rules, and anomaly detection policies for each virtual sensor.