Cisco Catalyst 6500 Series Switches

Cisco Catalyst 6500 Series Intrusion Detection System (IDSM-2) Service Module

Data Sheet

Cisco Intrusion Detection System Services Module (IDSM-2)

Cisco® integrated network security solutions enable organizations to minimize risk and maximize business continuity. The Cisco IDSM-2 for the Cisco Catalyst® 6500/7600 Series scales to multigigabit environments.

Figure 1. Cisco IDSM-2

Security threats have increased in complexity-multigigabit environments and efficient network intrusion security solutions are critical to maintaining a high level of protection. Vigilant protection ensures business continuity and minimizes the effect of costly intrusions. Cisco integrated network security solutions enable organizations to protect their connected business assets and increase the efficiency of intrusion prevention systems. The Cisco IDSM-2 is part of the Cisco Systems® family of intrusion detection and prevention (IDS/IPS) solutions. It works in concert with other Cisco IDS/IPS components to efficiently protect your data infrastructure.
The Cisco IDSM-2 is a services module for the widely deployed Cisco Catalyst chassis. With an installed base in the hundreds of thousands, the Cisco Catalyst chassis is a logical platform for additional services such as firewall, VPN, and IDS/IPS services. This second-generation services module provides unique benefits to customers seeking IDS/IPS attack protection.


Table 1 lists the features of the Cisco IDSM-2 for the Cisco Catalyst 6500/7600 Series.

Table 1. Cisco IDSM-2 Features


Features Details

Performance (passive)

• 600 Mbps
• 6,000 new TCP connections per second
• 6,000 HTTP transactions per second
• 60,000 concurrent connections

Performance (inline)

• 500 Mbps
• 5,000 new TCP connections per second
• 5,000 HTTP transactions per second
• 50,000 concurrent connections
• Supports up to 500,000 concurrent connections

Multigigabit scalability

• With no slot restriction on Cisco Catalyst 6500/7600 Series chassis, the 1-RU IDSM-2 can scale to up to 8 modules per chassis, providing up to 4 Gbps of inline prevention

Hot swap modules

• IDSM-2 insertion/removal never affects the Cisco Catalyst switch

Cisco Catalyst chassis benefits

• Cisco EtherChannel® load balancing
• Supervisor engine and power redundancy
• Port density
• Combining with other services modules to provide a scalable security solution

WAN interoperability support

• Supports the Cisco FlexWAN module

Accurate prevention technologies

• Advanced false positive reduction features provide confidence in data passed to the internal network by the user-adjustable Meta Event Generator and Risk Rating features

Multiple capture techniques

• Multiple techniques include SPAN/RSPAN; VLAN access control list (ACL) capture combined with shunning; TCP resets when in passive mode; and drop actions when used inline allows
• Allows customers to monitor various network segments and traffic while providing timely action to mitigate threats

VLAN ACLcapture

• Cisco is the only vendor to provide an in-switch IDS/IPS solution supplying access to the data stream via VLAN ACL capture

Flexible deployment

• Can be deployed in Cisco Catalyst 6500/7600 Series chassis with a wide range of supervisor engines, running either hybrid Cisco Catalyst OS or Cisco IOS® Software, for distribution across wide and varied installed base networks

Recommended minimum Cisco IOS Software support for Cisco IPS Sensor Software v5.1

• For Cisco IOS Software Release 12.2(18)SFX4, the following features are supported on the Supervisor Engine 2, Supervisor Engine 32, and Supervisor Engine 720: inline VLAN pairing and Cisco EtherChannel load balancing

Recommended minimum Cisco Catalyst OS support for Cisco IPS Sensor Software v5.1

• For Cisco Catalyst OS 8.5(1), the following features are supported on the Supervisor Engine 1, Supervisor Engine 2, Supervisor Engine 32, and Supervisor Engine 720: inline VLAN pairing and Cisco EtherChannel load balancing

Standardized code base

• Uses the same IPS code as the award-winning Cisco IPS 4200 Series appliances, allowing users to standardize on a single management technique
• Simplifies and speeds up installation, training, operation, and support

Optional anti-X integrated services

• Partnership with Trend Micro augments Cisco's native signature development to provide the quickest and most complete signature updates for timely recognition and prevention of attacks

Single device management using CLI or Cisco IPS Device Manager (IDM)

• Module can be configured using the CLI, which is available locally or remotely via Telnet or Secure Shell (SSH)
• Cisco IDM is a Web-based tool for sensor configuration and management. It can be accessed through Internet Explorer, Netscape, or Mozilla, and is enabled by default to use Secure Sockets Layer (SSL).

Enterprise management and monitoring

• Cisco IPS Event Viewer (IEV) provides event monitoring for up to five IPS sensors
• Cisco Security Manager and Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS) provide world-class management and monitoring for sensor deployments of all sizes

Physical Dimensions

• Height: 3.0 cm (1.2 in.)
• Width: 35.6 cm (14.4 in.)
• Depth: 40.6 cm (16 in.)
• Weight: 2.27 kg (5 lbs)


• Amps: 2.5
• Watts: 105
• Heat Dissipation: 450 BTUs

Operating Environment

• Operating temperature: 0 to 40ºC (32 to 104.5ºF)
• Non-operating temperature: -20 to 65ºC (-4 to 149ºF)
• Operating relative humidity: 10 to 90% (non-condensing)
• Non-operating relative humidity: 5 to 95% (non-condensing)
• Operating and non-operating altitude: sea level to 3,050m (10,000 ft.)


Cisco IDSM-2 Part Numbers

Part Number



Cisco IDSM-2 if purchased as part of a Cisco Catalyst system


Cisco IDSM-2 (spare)

Cisco IDSM-2 Service Part Numbers

Part Number



(as part of a Cisco Catalyst system)



Service key for "xx" in the part number:

SU1 = 8 x 5 x next business day

SU2 = 8 x 5 x 4-hour service

SU3 = 7 x 24 x 4-hour service

SU4 = 7 x 24 x 2 x next business day

SU01 = 8 x 5 x 4-hour service onsite

SU02 = 8 x 5 x 4-hour service onsite

SU03 = 7 x 24 x 4-hour service onsite

SU04 = 7 x 24 x 2-hour service onsite

Current Code and Signature Revision

• Software release:

• Signature release:

Cisco Catalyst Supervisor Engine Hardware, Software Requirements, and Interoperability

• Supported configurations, visit: ( login required)



FCC Part 15 (CFR 47) Class A, ICES-003 Class A, EN55022 Class A, CISPR22 Class A, AS/NZS 3548 Class A, VCCI Class A with UTP cables, EN55022 Class B, CISPR22 Class B, AS/NZS 3548 Class B, VCCI Class B with FTP cables


CE marking according to UL 1950, CSA 22.2 No. 950, EN 60950, IEC 60950, TS 001, AS/NZS 3260


• NEBS Level 3 pending (with Cisco Catalyst 7600)
• Common Criteria Level 2 certified

Export Restrictions

The Cisco IDSM-2 is classified as a "strong encryption" product and is export restricted. For more information, visit:


For more information about Cisco Catalyst 6500 Series Switches, visit:
For more information about Cisco IPS solutions, visit:
For intelligence reports about current vulnerabilities and threats, visit:
To download the Cisco IPS Event Viewer, visit:
For more information, on Cisco Security Manager, visit:
For more information on Cisco Security MARS, visit:


Cisco offers a wide range of services programs to accelerate customer success. These innovative services programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco services help you to protect your network investment, optimize network operations, and prepare the network for new applications to extend network intelligence and the power of your business. For more information about Cisco Services, see Cisco Technical Support Services or Cisco Advanced Services.