Adding an Intrusion Prevention System (IPS)

SUMMARY If your Configuration Source Management list includes an intrusion prevention system (IPS) device, you can add an IPS to connections between device-to-subnet nodes, and between device-to-device nodes. Adding an IPS connection is useful to determine the location of the IPS if the device is passive.

1. Click the Risks tab.
2. On the navigation menu, click Topology.
3. Move your mouse pointer over the connection line that links a device node and a subnet node.
4. Right-click the connection line, select Add IPS.
5. Select the device and interfaces to add from the following lists:

   Option	Description
   Place IPS	Select a placement from the list.
   Connect IPS interface	Select an interface to connect to the device. If you have multiple devices, then you need to select a device (see next option).
   To device	Select the device that you want to connect to the IPS. This option is available if you have multiple devices.
   Connect IPS interface	Select an interface to connect to the subnet.

6. Using the lists, select the device and interfaces to add the IPS connection to your topology, and then click OK.
   If you want to add an IPS to a device that is in a group, expand the group to add the IPS.
7. To remove an IPS, right-click the connection line, select Remove IPS, and click OK.