IDS / IPS (ER8411) + OC200 - does it automatically block?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

IDS / IPS (ER8411) + OC200 - does it automatically block?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
IDS / IPS (ER8411) + OC200 - does it automatically block?
IDS / IPS (ER8411) + OC200 - does it automatically block?
2024-08-17 15:41:52
Model: ER8411  
Hardware Version:
Firmware Version:

With IDS / IPS enabled, on high and compeltely enabled, does it automatically block any threats / traffic it percieves or will it only block it once i have added a specified item to the block list or generated a signature supression?

 

Once an item is added to the block list, can i enable signature supression too to stop identical alerts ?

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x1, ES205G x2, EAP650 x6 Remotes: ER605 v2 x3, SG2008P x2, EAP650 x2 VPN Server: ER7206 v2 Controller: OC300
  0      
  0      
#1
Options
1 Reply
Re:IDS / IPS (ER8411) + OC200 - does it automatically block?
2024-08-18 12:21:42

  @GRL 

 

IDS will only report first and you are given the choice to block.

 

IPS will block automatically and then report.  If you going to enable IPS with all the options, if this move is for a business... I would give yourself some free time to take calls from your users for some dlase positives.  

I can not teach anyone anything - I can only make them think - Socrates
  1  
  1  
#2
Options