Question

After a security review, it is recommended that your organization install a network intrusion prevention stem (NIPS). Based on the current budget, your manager recommends that you install a less-costly network detection system (NIDS). What is the primary security difference between a network intrusion detection system (NIDS) and a network intrusion prevention system (NIPS) that you can use to justify the additional costs? Explain how the difference is a positive or a negative in terms of security.

Answer 1

Difference between NIDS and NIPS

• NIDS detects a Threat and alert us whereas NIPS detects and takes necessary actions
• NIPS takes protective actions based on set of rules
• NIDS get mirrored traffic from a network tap
• NIPS has high end of network over head
• in NIDS can it just notify the admin that there is an attack before admin could do something he might have done his job

The cost concerns

• Here the cost is reduced and we use NIDS
• As we can understand the NIPS need lot of additional cost as it does more than just a detection
• Hence NIDS is a cost effective way
• But it rather puts overhead on the admin
• The admin have tp be in the rightplace at right time
• It just gives alarm
• Need very high care to system

HOPE THIS HELPS
FEEL FREE TO COMMENT