traffic doesn't flow through IPS

ravisambaji · ‎08-12-2008

Hi

my connectivity is like this

switch-->IPS-->ASA

i have configured the sensing interfaces in IPS to be in promiscous mode, but the traffic is not passing through

if i try to ping from switch to ASA through IPS it doesn't ping

if i bypass the IPS and connect the switch directly to ASA, i can ping ASA

please suggest what could be the issue

iam new to the IPS

Thanks Ravi

Farrukh Haroon · ‎08-12-2008

The topology you describe is for Physical Inline Interface Pair and not for Promiscuous mode.

switch-->IPS-->ASA

Have a look at this:

A Promiscuous mode topology is something like:

IPS<----SPAN/VACL----switch------>ASA

Regards

Farrukh