If you haven't logged into the IPS before then you can "session ips" from the ASA to get into the CLI of the IPS. This runs the same software as the modules and standalone units run so the configuration is the same.
In order to gain management access to the IPS in the 5515-X you will need to cable and enable the Management port on the ASA and give the IPS it's own IP address in the "service host" section of its configuration. Then you can ssh directly to the IPS software from those devices you specify in the "access-list" entries in the IPS software, also found in the "service host" section.
Please execute a "session ips" from the ASA to access the sensor module. Post this, you may execute "Show config" on the sensor to verify the configuration.
The default username/password on the sensor module is cisco/cisco.
IPS run as a licensed software module (License status on the ASA for 'IPS module' should be "Enabled". You may check the same by executing "show version" on the ASA. Also, the "show module" should display the 'module status' as 'Enabled')
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...