cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
494
Views
0
Helpful
2
Replies

ASA's 510 with AIP-SSM AND CSC-SSM

jjacobo
Level 1
Level 1

I have to connect 2 ASA's 5510, one with the IPS module and the other with CSC module. Which is the best way and how do i configure both?

Internet-->ASA-IPS-->ASA-CSC-->LAN

Do somebody know a link with that scenario?

Thanks and regards.

2 Replies 2

fauzyab.ahmed
Level 1
Level 1

As per Experience you must follow the sequence as ASA-CSC and then to ASA-IPS the reason behind this flow is traffic coming from outside should be going in a that it passes from one interface to another to be monitored by sensor.. the other solution is to configure e-span for IPS to monitor the sensor traffic passing through ASA.

Another thing that can be done to this topology is to configure both the devices parallel to each other and pass trafic from CSC to IPS and things will be done.. I hope this will help

Regards,

Fauzyab

Fauzyab, thanks a lot for your comment, so, do you have any link or config sample to check the IP addressing of the ASA's, IPS and CSC?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card