Below is an article I found (Got side tracked when looking up if CEF supports IPv6 or if it punts additional IP headers to the CPU – next post perhaps?) about how and when the Cisco IPS inspects traffic.

Cisco ASA IPS Traffic Flow

I found IDS and IPS was one of the more interesting topics covered in the CCNA Security Curriculum, so much in fact that I set up my own IPS with an old Procurv box running Security Onion (Check it out, it’s amazing!). I digress, check out the article!

Source: When does the Cisco ASA IPS module inspect traffic?

About The Author

Timothy started his networking career in 2014, working for one of the largest telecommunication operators in Australia. He has a passion for networking and cyber security. When he's not working, he's obsessing over German Shepherd Dogs.