MicroNugget: IDS vs. IPS

In this video, Keith Barker covers the nature of an IDS and IPS, what they do for a network, and their differences. Any network security solution will come with a cost and overhead: knowing the strengths and drawbacks of each option means you can make the right decision.

The central difference between an IDS and an IPS is that an IDS gets plugged into the network while an IPS is actually inline with network traffic. So while an IDS can raise an alert about malicious traffic, only an IPS actually stops traffic when a bad actor is detected.

At first glance, an IPS may sound like the better solution, but it's also usually more expensive. Unlike an IDS that can see the entirety of the network's traffic in one place, an IPS needs to be installed to see a machine's local activity. Each local installation costs money and overhead that an IDS doesn't.

And now you can learn all the basics of IDS and IPS pros and cons with this CISSP video.

Start learning with CBT Nuggets:

[jl-dqch]

Never heard anyone so stoked about this stuff.

[jessicadeford]

This was great it explained my entire 30 page chapter into something a visual learner could understand! Thank you!

[overtheedge]

Best trainer ever. Thank you for the clear explanation Keith.

[railpressureflip]

Oh man, that was brilliantly explained! Cleared up so many concepts, good stuff broseph!

[arshidrashid]

you are awesome man the way you are teaching sounds like you are enjoying by yourself to teach whatever you are teaching...thumbs up

[kervinsingh]

1:51 Came here praying u at least explain about span port and inline port and u explained it splendidly.

[johncalderone]

Thank you for a short but clear explanation.

[rohietsharrma]

A very descent and informative video it is. Thanx for this man .. Dont stop making such noble clips

[acathosh]

He sounds like he's dubbing an anime!

[sathyantinku]

Simple and clear. Best thing? I can explain it easily.

[loueybencheikh]

very good video, simple and detailled at the same time, thank you !

[christianrasmussen]

Wow easy to follow and engaging! Also easy on the eyes.

[sohgeokong]

Thanks very much for the clear explanation. I like it.

[raghuji]

thank you so much sir, looking forward for more knowledge from you

[bijubalan]

Thanks Keith for your simplicity :)

I have a question.

Where do I place my IPS system in the network if I need to protect both my DMZ and Local Network? Or do I need to purchase 2 hardware
?

[andis]

Simple and sweet, give you the thumb up.

[junaidshahid]

You explained how IDS detects malicious behavior such as signature and anomaly match. But how does IPS actually prevent that malicious behavior??

[akshaykale]

Very well explained, i have one doubt, clipping is set manually or automatically?

[bobdavislumbro]

Would't it be easier to just use a FW with UTM? or is IPS.IDS builtin on the FW?

[chouroukrafik]

And I'd like to thank You for this informative vid' !