06-19-2010 12:31 PM - edited 03-11-2019 11:01 AM
Hi friends,
As i have been through the CLI guide for Advanced setup of AIP-SSM it says while setting up AIP-SSM for the first time it says to create a new virtual sensor and new signature,why we need to create when i m running my ASA in single mode and there are no multiple context configured in my ASA,
Is it necessary tocreate new virtual sensor and signatures???
Thanks
Solved! Go to Solution.
06-19-2010 04:43 PM
I think you are reffering to the wizard as documented here :
What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.
The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.
Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.
Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.
Ensure you have installed a valid license on the sensor and set for updating the sensor as new signatures are released.
Regards,
06-19-2010 04:43 PM
I think you are reffering to the wizard as documented here :
What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.
The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.
Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.
Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.
Ensure you have installed a valid license on the sensor and set for updating the sensor as new signatures are released.
Regards,
06-24-2010 02:09 PM
thanks,edadios
the link u have provided me is broken, but the issue has been solved.
thanks again
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide