AIP-SSM, it is not sensing the traffic

[jorgecordova1]

Hi everyone, i have a trouble, now iam using an ASA 5510 with AIP-SSM10, my problem is when I redirect the traffic to the AIP-SSM for detects attacks, i probe it and then I look in the events logs of the IPS, and the sensor dont detect nothing, is necessary to install an IPS license??, it is for my own project, thanks.

[foreignmediagroup]

I've got the same problem over here...

The licence is not yet arrived but wanted to test de AIP.

[jwalker]

Unless you are scanning across the ASA, the SSM module will not "see" the scan and cannot produce events. To alarm on an SSM module, you must scan from one network to another. Basically, the SSM cannot do promiscuous monitoring. I would recommend an IPS appliance if you want to monitor traffic sent between hosts of the same network.

** Pls rate if this helps **

[foreignmediagroup]

I solved my "problem".

I hadn't added a real interface to the Virtual Sensor (vs0).

Now my configuration is working!

This all without a license