New to IPS, what do I need to plan before I turn this on?

whiteford · ‎02-25-2008

Hi, I have an ASA 5520 AIP-SSM 10. I'm having a consultant in to enable and upgrade our IPS on our ASA from 1.5 to 1.6 so it's intergrated into the ASDM (sounds difficult). He said I need to plan what policies we need to enable for the interfaces and DMZ's etc.

This is very new to me and I wondered if this is right, as it sounds bigger than I first thought. Basically I want my network to my as secure as possible and turning on the IPS we bought is needed.

Any advise, links etc would be most welcome.

mlenco · ‎02-25-2008

Go to cisco.com, put this into the search field, download the pdf and read all 799 pages.

Configuring the Cisco Intrusion Prevention

System Sensor Using the Command Line

Interface 6.0

Sorry to be the bearer of bad news, but that is the only way to truly understand this enigmatic box.

Matt