Description

Network intrusion prevention system (IPS) and intrusion detection system (IDS) sensors use various techniques to analyze network traffic in order to optimally detect suspicious and malicious traffic while maintaining the desired performance levels.
These sensors can be deployed in various situations and architectures to enhance network-based protection of enterprise assets.
This course describes network IPS traffic analysis methods, evasion methods that are used by attackers to avoid detection, and common anti-evasive countermeasures that network IPS engines use to avoid false negatives. It also describes common deployment scenarios and provides design guidelines for these scenarios.