Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

AIP-SSM20

Hi friends,

As i have been through the CLI guide for Advanced setup of AIP-SSM it says while setting up AIP-SSM for the first time it says to create a new virtual sensor and new signature,why we need to create when i m running my ASA in single mode and there are no multiple context configured in my ASA,

Is it necessary tocreate new virtual sensor and signatures???

Thanks

  • Firewalling
1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: AIP-SSM20

I think you are reffering to the wizard as documented here :

http://www.cisco.com/en/US/customer/docs/security/ips/7.0/configuration/guide/idm/idm_startup_wizard.html#wp2109548

What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.

The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.

Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.

Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.

Ensure you have  installed a valid license on the sensor and set for updating the sensor as new signatures are released.

Regards,

2 REPLIES
Silver

Re: AIP-SSM20

I think you are reffering to the wizard as documented here :

http://www.cisco.com/en/US/customer/docs/security/ips/7.0/configuration/guide/idm/idm_startup_wizard.html#wp2109548

What you really needed to do on a new sensor is to enable an interface, and assign that interface to the existing default configured virtual sensor.

The document is talking about assigning a signature policy, but otherwise, you do not need to configure a new signature, as the default virtual sensor, will already have assigned to it, the default signature policies as pre configured.

Working on Cisco IPS sensor, it is best practice to be tuning the sensor according to your network security policy and requiremenrt.

Otherwise the IPS signature team from Cisco is constantly reviewing the signature sets they have preconfigured on every signature releases for relevance and security protection of networks.

Ensure you have  installed a valid license on the sensor and set for updating the sensor as new signatures are released.

Regards,

New Member

Re: AIP-SSM20

thanks,edadios

the link u have provided me is broken, but the issue has been solved.

thanks again

165
Views
0
Helpful
2
Replies
This widget could not be displayed.