Just brought a SSM online

Unanswered Question
Sep 23rd, 2010
User Badges:

I just brought an SSM online.  I think it is working but when I go in the module and do a show statistics I really don't see anything?  Am I looking in the wrong place?  Can you see a better representation of what is going on from the ASDM?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
praprama Thu, 09/23/2010 - 17:56
User Badges:
  • Cisco Employee,


On the ASA, please do a "show service-policy" to see if packets are being re-directed to the SSM module. On the sensor, you can look at the output of "show statictics virtual-sensor" to see how if packets are being processes by the module.

Hope this helps!!

Thanks and Regards,


Panos Kampanakis Wed, 09/29/2010 - 11:19
User Badges:
  • Cisco Employee,

You can also run a packet tracer for an imaginary packet and see if it is going to hit your SSM module.

To divert traffic from the ASA ro the module you will need something like

access-list ssm-acl extended permit 

class-map csc-class
match access-list ssm-acl

policy-map global_policy
class ssm-class
  csc fail-open

I hope it helps.



This Discussion