I'm trying to get my SSM module to run in inline mode with an ASA5520. Under the service policy configuration inline mode is selected, however on the IPS the backplane interface says Promisicuous.
Am I missing something obvious?
The specific config lines all look ok:
ips inline fail-open
You are seeing a bug in IDM.
IDM is incorrectly assuming the interface is Promiscuous and shows promiscuous.
The sensor itself treats it as just a monitored interface rather than inline or promiscuous. Each packet will have a header attached by the ASA that determines whether or not the packet should be monitored inline or promiscuous.
This is being fixed in IDM so it just calls it a backplane interface instead of incorrectly assuming it is a promiscuous interface.