cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
359
Views
0
Helpful
2
Replies

AIP-SSM20

estelamathew
Level 2
Level 2

Hi friends,

As i have been through the CLI guide for Advanced setup of AIP-SSM it says while setting up AIP-SSM for the first time it says to create a new virtual sensor and new signature,why we need to create when i m running my ASA in single mode and there are no multiple context configured in my ASA,

Is it necessary tocreate new virtual sensor and signatures???

Thanks

1 Accepted Solution

Accepted Solutions

edadios
Cisco Employee
Cisco Employee

I think you are reffering to the wizard as documented here :

http://www.cisco.com/en/US/customer/docs/security/ips/7.0/configuration/guide/idm/idm_startup_wizard.html#wp2109548

What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.

The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.

Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.

Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.

Ensure you have  installed a valid license on the sensor and set for updating the sensor as new signatures are released.

Regards,

View solution in original post

2 Replies 2

edadios
Cisco Employee
Cisco Employee

I think you are reffering to the wizard as documented here :

http://www.cisco.com/en/US/customer/docs/security/ips/7.0/configuration/guide/idm/idm_startup_wizard.html#wp2109548

What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.

The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.

Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.

Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.

Ensure you have  installed a valid license on the sensor and set for updating the sensor as new signatures are released.

Regards,

thanks,edadios

the link u have provided me is broken, but the issue has been solved.

thanks again

Review Cisco Networking products for a $25 gift card