As mobile devices and Web 2.0 applications proliferate, it becomes harder to secure corporate perimeters. A key component of Cisco Secure Borderless Network architecture, the Cisco® Advanced Inspection and Prevention Security Services Module (AIP SSM) with Global Correlation and the Cisco Advanced Inspection and Prevention Security Services Card (AIP SSC) for the Cisco ASA 5500 Series Adaptive Security Appliance provide proactive, full-featured intrusion prevention services to stop malicious traffic before it can affect your network. Cisco Intrusion Prevention System (IPS) with Global Correlation increases the efficacy of traditional IPS. With updates every 5 minutes, Cisco IPS with Global Correlation provides fast and accurate threat protection with real-time global intelligence from Cisco IPS, firewall, email, and web appliances.
The Cisco AIP SSM and AIP SSC are part of the Cisco ASA 5500 Series Adaptive Security Appliance solution, which provides superior firewall and VPN capabilities in a single, easy-to-deploy platform. With the advanced inspection capabilities of the Cisco AIP SSM or Cisco AIP SSC, this appliance provides integrated, converged protection of your servers and infrastructure without compromising your ability to use the network as a business tool.
Cisco AIP SSM Intrusion Prevention Services
The Cisco AIP SSM and AIP SSC combine inline prevention services with innovative technologies to improve accuracy. For you, this means confidence in the protection offered by your IPS solution without the fear of legitimate traffic being dropped. When deployed within Cisco ASA 5500 Series appliances, the AIP SSM and AIP SSC offer comprehensive protection of your IPv6 and IPv4 networks by collaborating with other network security resources, providing a proactive approach to protecting your network.
The Cisco AIP SSM and AIP SSC help you stop threats with greater confidence through the use of:
● Wide-ranging IPS capabilities: The Cisco AIP SSM delivers all the IPS capabilities available on Cisco IPS 4200 Series Sensors. The Cisco AIP SSM can be deployed inline in the traffic path or in promiscuous mode, whereby a copy of the traffic is sent to the Cisco AIP SSM for inspection.
● Global Correlation: The Cisco AIP SSM provides real-time updates on the global threat environment beyond your perimeter by adding reputation analysis, reducing the window of threat exposure, and providing continuous feedback. With these new capabilities, the Cisco AIP SSM can detect more threats, detect them earlier and more accurately, and protect critical assets from malicious attacks. Global Correlation is available only on the AIP SSM.
● Comprehensive and timely attack protection: The Cisco AIP SSM and AIP SSC deliver protection against tens of thousands of known exploits and millions more potential unknown exploit variants using specialized IPS detection engines and thousands of signatures. Cisco Services for IPS provides signature updates through a global intelligence team working 24 hours a day to help ensure that you are protected against the latest threats.
● Day-zero attack protection: The Cisco AIP SSM provides powerful protection against day-zero attacks. Cisco anomaly detection learns the normal behavior on your network and alerts you when it sees anomalous activities in your network. Cisco anomaly protection helps protect you against new threats even before signatures are available. Anomaly detection is not available on the AIP SSC.
● Wireless protection: The Cisco ASA SSM and AIP SSC are tightly integrated with the Cisco Wireless LAN Controller to help keep intruders out of your wireless network. The Cisco Wireless LAN Controller blocks intruders based on real-time threat intelligence from the Cisco ASA AIP SSM and AIP SSC.