IPS Management

Cisco Security Manager also provides centralized IPS management. Cisco Security Manager allows you to add an IPS System device to the centralized device list. Cisco Security Manager also supports the ability to select an IPS device, including the AIP-SSM on the ASA or the IPS feature set on IOS and then select the IPS signatures, like the IPS antispyware signatures that you learned about in Chapter 3. IPS signatures can be applied to a device as demonstrated in Chapter 3, or IPS signatures can be copied to a group of devices. The Cisco Security Manager can also import the IPS signatures that were deployed by the Cisco Incident Control Service (Cisco ICS) product discussed in Chapter 4, "Cisco Incident Control Service," on worm mitigation.