Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Silver

IP Audit

My understanding is that IPS and CX cannot be combined. And that Cisco will add IPS functionality into the CX in the future.

In the meantime, I wonder what forum members think of the basic IPS functionality in the ASA, namely the 'ip audit' commands. I don't know much about this, other than you can't update the signatures, so am curious how effective it is?

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

IP Audit

I've never seen this feature used in any installations I've worked with. Given its extremely limited functionality I'd be hesitant to recommend it.

I believe CX and IPS (not IPS as part of CX but rather both operating simultaneously) will be in a future release of ASA software.

If the requirement was immediate, there are several other alternatives - IPS appliance (Cisco or 3rd party such as Sourcefire whose acquisition by Cisco was just announced), IOS IPS sensor in an external router, use IPS on ASA but offload content security to WSA or Cloudscan, etc. etc.

2 REPLIES
Hall of Fame Super Silver

IP Audit

I've never seen this feature used in any installations I've worked with. Given its extremely limited functionality I'd be hesitant to recommend it.

I believe CX and IPS (not IPS as part of CX but rather both operating simultaneously) will be in a future release of ASA software.

If the requirement was immediate, there are several other alternatives - IPS appliance (Cisco or 3rd party such as Sourcefire whose acquisition by Cisco was just announced), IOS IPS sensor in an external router, use IPS on ASA but offload content security to WSA or Cloudscan, etc. etc.

Silver

Re: IP Audit

Thanks Marvin. I have never seen it in the field either. Hopefully Cisco can get the CX to work with the existing IPS fairly soon.

Thanks for the Sourcefire info too - interesting. I wonder if their technology will filter into the CX, when Cisco say they will add IPS functionality to the CX.

132
Views
0
Helpful
2
Replies
CreatePlease login to create content