Chapter 7. Network Intrusion Prevention Overview

Network Intrusion Prevention provides a proactive component that effectively integrates into your overall network security framework. Combining Network Intrusion Prevention with other security components, such as a Host Intrusion Prevention System (HIPS), an Intrusion Detection System (IDS), and perimeter firewalls, provides a robust defense-in-depth network security solution.

An Intrusion Prevention System (IPS) provides a powerful addition to your overall network security solution, but it also has its limitations. This chapter focuses on the following topics:

• Network Intrusion Prevention capabilities

• Network Intrusion Prevention benefits

• Network Intrusion Prevention limitations

• Hybrid IPS/IDS systems

• Shared IDS/IPS capabilities