IPS not communicating with ASDM

josh.adams · ‎02-12-2008

Previously, when using ASDM version 5.2(3), I had no problem connecting to the IPS using any of the IPS tabs or buttons in the interface. Now I'm getting this:

For IPS 5.1(6)E1, use the link below to access IPS Device Manager. (If the SSM management IP address or port is translated, replace them accordingly in the below URL). IPS 6.0.1 or above will be fully integrated into ASDM.

Then it supplies a link to an IP address that my IPS is not configured on.

I am running the latest version of the IPS 6.0.3.

It's like the two systems aren't talking to each other anymore. I haven't changed the IP on either device. I can still go directly to the IPS through IDM, but now no traffic is being passed from the ASA to the IPS.

tstanik · ‎02-18-2008

You will need to connect the management interface of the IPS directly to ASA. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/ips.html

abinjola · ‎02-19-2008

So you are hitting a bug and you may view the details here

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCse47360

Now the workaround is either to access the SSM by using IDM (Intrusion Device Manager) which can be done by assigning a management IP on the management port and connecting it to the VLAN/switch from where you can access it

If you would like to access IPS from ASDM itself then you need to upgrade the SSM Module to versin 6.x