AIP-SSM, how to configure?

[cjrchoi11]

I have a dummy question regards the ASA5100 with AIP-SSM. I just ordered but not familar to the configution.

The requirement is I have three interfaces(external, internal and DMZ) and want to investigate all by the AIP.

Can I have a configuration example to achive the requirement?

Thanks in advance,

[a.kiprawih]

Hi,

ASA basically is a firewall box with IPS module (AIP-SSM). You can order this unit with or without SSM.

With SSM, you can divert traffic traversing your firewall using policy to SSM to inspect the traffic.

1. To configure firewall side, check the following url. Sample config included.

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_book09186a008054c15c.html

2. To configure AIP-SSM:

-> Command Line Approach:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_book09186a008055dbb1.html

-> GUI (Java-based menu):

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00804cf4c4.html

Rgds,

AK