Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
460
Views
4
Helpful
1
Replies

Configuring AIP SSM to monitor only

Go to solution
JACQUES DU PLESSIS
Level 1
Level 1

‎07-13-2009 12:55 AM - edited ‎03-10-2019 04:41 AM

Hi all,

We purchased an AIP-SSM-20 for our ASA5520. Is there a way to enable IPS functionality, but not block anything, i.e. just log events? This is just to see if any legitimate company traffic will be blocked.

Thanks!

Jacques

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
gbekmezi
Level 5
Level 5

‎07-13-2009 10:33 AM

Configure the ASA to send traffic to the IPS in promiscuous mode using the following command in a policy-map:

hostname(config-pmap-c)# ips {inline | promiscuous} {fail-close |

fail-open} [sensor {sensor_name | mapped_name}]

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5500/quick/guide/aipssm.html

Geroge

View solution in original post

1 Reply 1

Go to solution
gbekmezi
Level 5
Level 5

‎07-13-2009 10:33 AM

Configure the ASA to send traffic to the IPS in promiscuous mode using the following command in a policy-map:

hostname(config-pmap-c)# ips {inline | promiscuous} {fail-close |

fail-open} [sensor {sensor_name | mapped_name}]

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5500/quick/guide/aipssm.html

Geroge

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card