cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
589
Views
0
Helpful
2
Replies

AIP SSM 10 config

derek.warner
Level 1
Level 1

I have an AIP SSM 10 module on an ASA 5510. My management address of the ASA is still default at 192.168.1.1 and the management of the IPS is 192.168.1.2.

Internal addresses are 172.16.x.x, external addresses are 10.1.x.x

I would like to setup the SSM to monitor traffic coming inside from the outside interface. Haven't really seen any good documentation on this. Anyone help would be greatly appreciated.

2 Replies 2

jens.becker
Level 1
Level 1

Create a class-map to identify traffic:

access-list monitor-acl extended permit ip any 172.16.0.0 255.255.0.0 log

class-map IPS_TRAFFIC

match access-list monitor-acl

Create Policy-Map to define what should happen with the traffic:

policy-map IPS_POLICY

class IPS_TRAFFIC

ips inline fail-open

Bind Policy to Interface:

service-policy IPS_POLICY interface outside

Thanks, will try this today.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: