Identifies techniques and best practices for optimizing intrusion prevention system performance.
This chapter explains how to refine intrusion prevention performance.
Intrusion prevention performance tuning
Describes features for improving system performance while analyzing traffic for attempted intrusions.
License requirements for intrusion prevention performance tuning
Lists the licensing prerequisites and requirements needed to enable and configure intrusion prevention performance tuning features on Cisco Secure Firewall devices.
Requirements and prerequisites for intrusion prevention performance tuning
Lists the system requirements and prerequisite configurations needed before implementing intrusion prevention performance tuning on Cisco Secure Firewall devices.
Limiting pattern matching for intrusions
Configure pattern matching limits to optimize intrusion detection performance by controlling the maximum number of pattern states analyzed per packet and managing content checks on reassembled traffic.
Regular expression limits overrides for intrusion rules
Describes how to override default regular expression limits for intrusion rules to balance improved detection with system performance.
Override regular expression limits for intrusion rules
Override regular expression limits for intrusion rules to optimize performance.
Per packet intrusion event generation limits
Lists the configuration options for controlling intrusion event logging limits when the rules engine evaluates traffic.
Limiting intrusion events generated per packet
Configure the intrusion event logging limits to control the number of intrusion events generated per packet.
Packet and intrusion rule latency threshold configuration
Describes latency-based settings that use thresholding to manage packet and rule processing performance in access control policies.
Intrusion performance statistic logging configuration
Lists the configuration options for intrusion performance statistic logging settings and troubleshooting options.
Configure intrusion performance statistic logging
Configure intrusion performance statistic logging to customize sampling parameters and troubleshoot options for monitoring device performance.