ASA 5500 AIP-SSM

bma · ‎06-21-2007

Hi

Is AIP-SSM optional or default install with ASA 5520? What is difference PIX inspection feature with AIP-SSM?

Thanks

ben

Fernando_Meza · ‎06-21-2007

Hi .. AIPSSM is an additional module that you can install on the ASA to provide intrusion prevention features. The PIX inspection feature you are talking about is the fixup on PIX or inspect on ASA. This basically adds extra security features that allows the firewall to handle well known traffic such as http, ftp, smtp .. etc .. making sure it conforms with TCP RFC standards for those protocols. AIPSSM provides full packet inspection and looks deep in to the packets to detect any abnormalities which could be caused by a virus for example ..

For more detail .. please refer to http://cisco.com/en/US/products/ps6120/products_configuration_guide_book09186a00806a61b0.html

do a search for the chapter 25 'Configuring Application Layer Protocol

Inspection'

I hope it helps .. please rate it if it does !!!

bma · ‎06-22-2007

Thanks

Does AIPSSM is optional with ASA 5520? Could we install AIPSMM and CSC-SSM in the ASA5520?

Ben

Fernando_Meza · ‎06-23-2007

Hi .. yes it is optional .. and yes you can use either module if you like, you can only use one at a time though because the ASA only has one extra slot.