ASA -SSM 40 config review

[virgoboy009]

Hello Friends,

I would like to know the following ASA and SSM-40 configuration meeting the standard configuration and please let me know

how do i further do advance config to get out of this IPS module.

Also I am using IME 6.2 tool to monitor ASA -SSM 40  but it is giving all basic monitoring data, do we need to do any further config on ASA-SSM 40 so it

it will show all critical logs.

Finally i am seeing the below related to IPS license expired error.

***LICENSE NOTICE***
The license key on the SSM-IPS40 has expired.
The system will continue to operate with the currently installed
signature set.  A valid license must be obtained in order to apply
signature updates.  Please go to http://www.cisco.com/go/license
to obtain a new license or install a license.
HQ-IPS-SSM40-ASA5520#

Highly appreciate all your response.

Regards,

KA.

[Scott Fringer]

KA;

  Your configuration is very standard and should allow the AIP-SSM to successfully inspect traffic traversing the ASA.

  I am not sure what you are asking when you say,"it will show all critical logs."  IPS  Manager Express (IME) is designed to retrieve all signature related (alert) events from Cisco IPS sensors (unless the managed sensor is configured to exclude specific severity levels).  IME will not retrieve system level (error) events; this is not currently possible.

  In regard to your licensing issue, you will need to have the AIP-SSM's serial number added to a valid support contract with signature update support.  This will allow you to apply an updated license which will in turn allow you to update the signatures.  If the AIP-SSM is currently on a valid support contract, you can attempt to retrieve an updated license for the sensor via IME.  Navigate to the following:

Configuration>Sensor Management>LIcensing

  Choose "Cisco.com" for the "Update From:" option and then click "Update License".

Scott