Designing an Intrusion Prevention System for SecureIT Pentesters

Cisco Networking CCNA 1
CISCO NETWORKING CCNA
Name
Instructor
Institution
Course
City
Date

Cisco Networking CCNA 2
CISCO NETWORKING CCNA
Introduction
As shown by the topology diagram SecureIT Pentesters is located in a four-building
house that is based in Watford. The organization also operates a remote site. As a computer
security specialist in pen-testing and IPS, I will design an intrusion prevention system to help my
employer in carrying out a pentest.
An IPS system

Cisco Networking CCNA 3
Deployment of IPS
In this scenario, the organization needs to deploy CISCO IPS modules in inline type of
mode. This will help in blocking inbound type of attacks. In addition to this, the organization
needs to install a standalone type of IPS in a promiscuous mode. This ought to be done inside of
the organization network. This two types of IPS ought to be attached to a distribution switch so
as to watch any malicious activity that is traversing in the switch. The organization also have to
deploy the two types of IPS between the remote site and the campus site to watch over the
organization LAN and any traffic which may be coming from DMVPN connection or patterns
connections or from the wireless traffic [2]. In addition, to the location, the organization need to
go for Cisco IPS 4520 sensor. For this type of CISCO IPS 4345, the organization ought to use
two-1 gigabit interfaces. In here each of them is attached to one of the switches using a port
channel. Figure 1 shows how the IPS system are deployed on the topology

Cisco Networking CCNA 4
Figure 1: How IPS ought to be deployed