Unanswered Question
Fernando_Meza Thu, 06/21/2007 - 16:59

Hi .. AIPSSM is an additional module that you can install on the ASA to provide intrusion prevention features. The PIX inspection feature you are talking about is the fixup on PIX or inspect on ASA. This basically adds extra security features that allows the firewall to handle well known traffic such as http, ftp, smtp .. etc .. making sure it conforms with TCP RFC standards for those protocols. AIPSSM provides full packet inspection and looks deep in to the packets to detect any abnormalities which could be caused by a virus for example ..

For more detail .. please refer to

do a search for the chapter 25 'Configuring Application Layer Protocol


I hope it helps .. please rate it if it does !!!

Fernando_Meza Sat, 06/23/2007 - 03:43

Hi .. yes it is optional .. and yes you can use either module if you like, you can only use one at a time though because the ASA only has one extra slot.


This Discussion