IPS feature on ASA (No IPS Module)

rico_hao40 · ‎03-12-2008

Hi,

If the ASA does not has AIP SSM, does it have IPS feature? If have, how to enable. I remember the old PIX can enable some IPS feature which has a part of full signature.

I noticed there have some "inspect skinny', what's that does???, Is the IPS feature? What I need is monitoring voIP traffic across my ASA. Thanks.

Can you give a link or example

abinjola · ‎03-12-2008

If the ASA does not has AIP SSM, does it have IPS feature?

-->no

If have, how to enable. I remember the old PIX can enable some IPS feature which has a part of full signature.

-->Without SSM , ASA only supports default signatures

I noticed there have some "inspect skinny', what's that does???, Is the IPS feature? What I need is monitoring voIP traffic across my ASA.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1148989

srue · ‎03-12-2008

the asa/pix platforms do have very basic IPS support. it's just not nearly as extensive as the module, or a full IPS appliance.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/protect.html#wp1056358