Passive device profiling in IPS consists of certain limitations that are enforced by other settings or hardware. These limitations are as follows:
Profiling for devices with IPv6 addresses is currently supported only for HTTP device profiling.
Device profiling will not happen for a host which:
Has the SYN cookie feature activated.
Has encountered an IGNORE firewall rule.
Sensors have a limit on the number of profiles that they can process. This limit depends on the Sensor model. The Sensor models along with their specific limits are listed in the table below.
Sensor | Profile Limits (No. of profiles) |
|---|---|
NS9600 stack (2-node) - 120 Gbps throughput | 100,000 |
NS9600 standalone - 60 Gbps throughput | 100,000 |
NS9600 standalone - 40 Gbps throughput | 100,000 |
NS9600 standalone - 20 Gbps throughput | 100,000 |
NS9500 stack - 100 Gbps throughput | 100,000 |
NS9500 stack - 60 Gbps throughput | 100,000 |
NS9500 stack - 40 Gbps throughput | 100,000 |
NS9500 standalone - 30 Gbps throughput | 100,000 |
NS9500 standalone - 20 Gbps throughput | 100,000 |
NS9500 standalone - 10 Gbps throughput | 100,000 |
NS9300, NS9200, NS9100 | 100,000 |
NS7600 - 20 Gbps | 100,000 |
NS7600 - 15 Gbps | 100,000 |
NS7600 - 10 Gbps | 100,000 |
NS7600 - 5 Gbps | 100,000 |
NS7500 - 7.5 Gbps | 100,000 |
NS7500 - 5 Gbps | 100,000 |
NS7500 - 3 Gbps | 100,000 |
NS7350 | 100,000 |
NS7250 | 50,000 |
NS7150 | 25,000 |
NS7300 | 100,000 |
NS7200 | 50,000 |
NS7100 | 25,000 |
NS5200 | 15,000 |
NS5100 | 15,000 |
NS3600 - 5 Gbps | 100,000 |
NS3600 - 3 Gbps | 100,000 |
NS3600 - 1 Gbps | 100,000 |
NS3500 | 10,000 |
NS3200/NS3100 | 10,000 |
IPS-VM600 | 15,000 |
IPS-VM5000 | 15,000 |