Cisco IPS 4200 Series Sensors

The Cisco® IPS 4240-DC is a purpose-built intrusion prevention sensor that augments Cisco's market-leading line of intrusion detection and prevention system appliances, delivering the industry's best price/performance marks while achieving high levels of reliability (Figure 1). The Cisco IPS 4240-DC is based on the IPS 4240 platform but introduces unique features, such as support for DC power and compliance with NEBS (Network Equipment Building Systems) Level 3 guidelines. This allows the IPS 4240-DC to be deployed in environments that have specific requirements pertaining to NEBS Level 3 compliance.

Figure 1. The Cisco IPS 4240-DC Sensor

Table 1. Features Table

NEW FEATURES

• NEBS Level 3 Compliance

• Support for DC power

• Effective worm and virus mitigation through inline intrusion prevention capabilities*

• Purpose-built, high-performance IPS appliance featuring reduced weight and dimensions

• Dual-mode intrusion detection and prevention settings that allow the deployment of a single unit to simultaneously deliver both promiscuous-based IDS and inline IPS operations

• Multi-network interface card (NIC) support, with four on-board monitoring interfaces

• Copper interfaces

• ROMMON/Trivial File Transfer Protocol (TFTP)-based quick sensor imaging

• Increased reliability through diskless architecture and the support of flash memory

• Optimized power consumption through the incorporation of multiple thermal zones and the delivery of heat-sensitive fans

• Enhancement of high-availability IPS deployments through the delivery of automated sensor bypass mechanisms

• A highly scalable and resilient architecture using Cisco EtherChannel® load-balancing capabilities on Cisco Catalyst® switches

• Multiple automated response actions, including packet drops*, connection termination, and access control list (ACL) blocking on routers, switches, and firewalls

• Improved reliability of inline IPS packet drop actions by using risk ratings to accurately qualify the fidelity of events*

• False alarm reduction through enhanced on-box correlation, using the Meta Event Generator (MEG)

• Application inspection technologies, for enforcement of policy decisions based on content detected at the application layer*

• Advanced voice over IP (VoIP) engine that detects and stops threats in VoIP environments*

• Support for packet inspection in MPLS environments

• VLAN-based load sharing through the support of 802.1q

• Embedded management and monitoring options that support encrypted communications

• Support for ICSA's standards-based Security Device Event Exchange (SDEE) communications protocol*

UPGRADE PATHS

AVAILABILITY

ORDERING INFORMATION

Table 2. Ordering Information for the Cisco IPS 4240-DC

FOR MORE INFORMATION