IPS and AV&AS Scanning

Hi MCneil,

Yes, configuring IPS and AV/AS Scan is suggested to protect your internal network from Intrusion attacks and Malware infection. The bandwidth will be affected as the packets will be intercepted for the scan and filter. I would like to see what is the value of IPS maxpkts set, take SSH access to the Cyberoam and go to option 4. Device console and run the following command.

console> show ips-settings

There is an existing XG KBA, that might help. Please refer to, How to configure IPS settings in SFOS.

Show us the output. 

Thanks,

Hello Sachin,

Thanks for the response. Can you give me correct configuration for IPS in order for us to browse more faster in the internet without compromising our security and enabling IPS for malware protection. The image below is our IPS settings.  Now our ips is set to none.

Awaiting for your response.

Best Regards,

Mcneil

You can follow the KB article: How to configure IPS settings in SFOS and tweak the lowmem settings. I will not recommend you to turn off packet stream. 

Thanks,

Thanks for prompt reply. i shall follow the article you provide me and turn on the packet stream.

Thanks a lot.

Thanks for prompt reply. i shall follow the article you provide me and turn on the packet stream.

Thanks a lot.