Adding an Intrusion Prevention System (IPS)

If your Configuration Source Management list includes an intrusion prevention system (IPS) device, you can add an IPS to connections between a device-to-subnet nodes, and between device-to-device nodes.

Adding an IPS connection is useful to determine the location of the IPS if the device is passive.

1. Click the Risks tab.
2. On the navigation menu, click Topology.
3. Move your mouse pointer over the connection line that links a device node and a subnet node.
4. Right-click the connection line, select Add IPS.
5. Select the device and interfaces to add from the following lists:

   Option	Description
   Place IPS	Select a placement from the list.
   Connect IPS interface	Select an interface to connect to the device. If there are multiple choices devices, then you need to select a device (see next option).
   to device	Select the device that you want to connect to the IPS. This option is available if there are multiple devices.
   Connect IPS interface	Select an interface to connect to the subnet.

6. Using the lists, select the device and interfaces to add the IPS connection to your topology.
7. Click OK.

   If you want to add an IPS to a device that is in a group, expand the group to add the IPS.

Removing an Intrusion Prevention System (IPS)

You can remove an IPS connection.

1. Click the Risks tab.
2. On the navigation menu, click Topology.
3. Move your mouse pointer over the connection line that links a device node and a subnet node.
4. Right-click the connection line, select the Remove IPS idp option.
5. Click OK.