Cisco IPS 7.0: Virtualization, High-Availability, and High-Performance Solutions

This course is included in our On-demand training solution.


Cisco Intrusion Prevention System (IPS) sensors allow you to use multiple virtual contexts (also called virtual sensors) that allow the use of different IPS policies on different sets of inline or promiscuous interfaces. Additionally, Cisco IPS sensors are often used in environments that demand high-service availability and deterministic network performance and may require specific design decisions or configuration tuning to perform optimally.
This course provides configuration guidance on Cisco IPS policy virtualization, and enables you to choose Cisco IPS network integration methods that can provide fault-tolerant IPS solutions as well as IPS solutions that provide optimal performance.

Target Audience

Anyone wishing to obtain the Cisco Certified Network Professional CCNP Security, Cisco Certified Security Professional CCSP Certification or Cisco IPS Specialist Certification designation. Established IT professionals with a good understanding of networking and Cisco technology, installation, troubleshooting and monitoring of devices used to maintain integrity, confidentiality and availability of data and network devices that Cisco uses in its security infrastructure. Candidates who have completed the Cisco Certified Network Associate Security Certification – Implementing Cisco IOS Network Security (IINS).


Expected Duration

60 min.

Course Objectives

Cisco IPS Virtual Sensors

  • recognize the elements of virtual sensors
  • describe how to configure a new virtual sensor
  • describe how to verify the operation of the virtual Cisco IPS sensor
  • Configuring Policy Virtualization

    High-Availability Solutions for Cisco IPS Deployments

  • describe how to evaluate design options for switching-based high availability
  • Routing-Based and ASA-Based Sensor High Availability

  • identify how to evaluate design options for routing-based high availability
  • identify how to evaluate design options for Cisco ASA-based high availability
  • Cisco IPS Sensor Performance Overview

  • describe how to evaluate sensor performance issues
  • Load-Sharing and Traffic Reduction

  • recognize options for sensor load sharing
  • recognize options for reducing traffic through an IPS sensor to increase its performance