Cisco IOS IPS Signatures
A Cisco router running the IPS module comes with 100 attack signatures
preloaded in the Cisco IOS Software. Many additional signatures can be
loaded by installing Signature Definition Files (SDF) on the router.
Cisco IOS IPS Alarms
When an attack signature is detected, the router can take any of the following
configurable actions:
¦ Send an alarm
¦ Drop the packet
¦ Reset the TCP connection
¦ Block the source IP address of the packet for a configurable amount
of time
¦ Block the connection for a configurable amount of time