I have configured the IPS Appliance and the IPS module on ASAs... now I need to configure an IDSM-2 on a 6500.
Is it basically the same thing?
I need to configure it as an IDS first, then we will change it to IPS, so I understand that I can use SPAN to send traffic to the module, and configure the interface on the module to monitor the traffic, is this correct?
Is there anything else I should be aware of?
Thank you for any insight!