Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

AIP SSM 10 config

I have an AIP SSM 10 module on an ASA 5510. My management address of the ASA is still default at 192.168.1.1 and the management of the IPS is 192.168.1.2.

Internal addresses are 172.16.x.x, external addresses are 10.1.x.x

I would like to setup the SSM to monitor traffic coming inside from the outside interface. Haven't really seen any good documentation on this. Anyone help would be greatly appreciated.

2 REPLIES
New Member

Re: AIP SSM 10 config

Create a class-map to identify traffic:

access-list monitor-acl extended permit ip any 172.16.0.0 255.255.0.0 log

class-map IPS_TRAFFIC

match access-list monitor-acl

Create Policy-Map to define what should happen with the traffic:

policy-map IPS_POLICY

class IPS_TRAFFIC

ips inline fail-open

Bind Policy to Interface:

service-policy IPS_POLICY interface outside

New Member

Re: AIP SSM 10 config

Thanks, will try this today.

262
Views
0
Helpful
2
Replies
CreatePlease to create content