Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 632
  • Last Modified:

What is the difference between IDSM2 for 6509 and stand alone Cisco IPS

What is the difference between IDSM2 for 6509 and stand alone Cisco IPS and which is better.
  • 2
3 Solutions
Depends on your situation.

The advantage of the IDSM2 is that you have redundant PSU's and a faster backplane connection.
A disadvantage is that you need to take a slot on your 6509 which some people can't do.

Not sure of the price, but a comparable IPS is the 4255
it depends on the application and what you need to monitor.

the IDSM2 is in the chassis of the catalyst switch and so can provide a lot of flexibility as far as configuration goes but it takes 4 of them to provide 2Gigs of through put from http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps5058/product_data_sheet0900aecd804b91d7.html. the new 4200 IPS can have multiple gig interfaces and scale up to supporting 4Gigs of throughput. from https://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps9157/product_data_sheet09186a008014873c_ps4077_Products_Data_Sheet.html

There is a time and a place for both, but really it is dependent upon where you are needing the services as to which is the best fit. If there is a specific application we could discuss the pros and cons of each solution with a concrete example. Personally I only put in standalone appliances with failopen kits, but that is because I do not always want to be tied to a specific vendor and have the flexibility to provide the exact capabilities I need for eahc application.

hope this helps,


if you follow the links that I posted you will see that you can get stand-alone's with redundant power supplies and faster throughput in both the 4260 and the 4270.

I think the real difference is that the IDSM2 can be placed in a variety of different configurations in the Chassis without needing interfaces allocated while you are limited to the ethernet interfaces that you have on box or module with the stand-alone.

would you agree?


Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now