No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - Security

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document provides the basic concepts, configuration procedures, and configuration examples in different application scenarios of the network management feature supported by the device.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for IPS

Licensing Requirements and Limitations for IPS

Involved Network Elements

Other network elements are not required.

Licensing Requirements

For IPS-capable devices, their licensing requirements for the IPS function are as follows:
  • AR160&AR1200&AR2200&AR3200 series: By default, this function is disabled on a new device. To use the IPS function, apply for and purchase the following license from the Huawei local office.
    • AR160 series: AR150&160&200 Value-Added Security Package
    • AR1200 series: AR1200 Value-Added Security Package
    • AR2200 series: AR2200 Value-Added Security Package
    • AR3200 series: AR3200 Value-Added Security Package
For IPS signature database upgrade-capable devices, their licensing requirements for the IPS signature database upgrade function are as follows:
  • AR160&AR1200&AR2200&AR3200 series: By default, this function is disabled on a new device. To use the IPS signature database upgrade function, apply for and purchase the following license from the Huawei local office.
    • AR160 series: AR160 IPS Service Subscribe 1 Year
    • AR1200 series: AR1200 IPS Service Subscribe 1 Year
    • AR2200 series: AR2200 IPS Service Subscribe 1 Year
    • AR3200 series: AR3200 IPS Service Subscribe 1 Year

Feature Limitations

When deploying IPS on the router, pay attention to the following:

  • The device supports IPS filtering that involves personal communication information collection or storage. Huawei will not collect or save user communication information independently. You must use the features in compliance with applicable laws and regulations. Ensure that your customers' privacy is protected when you are collecting or saving communication information.
  • In a networking environment in which the inbound and outbound paths of packets are different, IPS probably cannot detect network intrusions effectively.
  • The following product models support IPS function:
    • AR160 series: AR169BF, AR169FGW-L, AR169FGVW-L, AR169FVW-8S, AR169JFVW-4B4S, AR169JFVW-2S, AR169EGW-L, AR169EW, AR168F-4P, AR161EW, AR161EW-M1, AR161FW, AR161FV-1P, and AR169FVW.

    • AR1200 series: AR1220E, AR1220EV, and AR1220EVW.

    • AR2200 series: AR2204, AR2204XE, AR2204XE-DC, AR2220, AR2220E, AR2240, and AR2240C.

    • AR3200 series: All models.

Translation
Download
Updated: 2019-08-07

Document ID: EDOC1100034077

Views: 126479

Downloads: 231

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next