Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IPS ASA-SSM-20 and IME

I have a ASA-SSM-20 with ver 7.0.(1 )installed on a ASA5520. I manage it with IME 7.0.1. With IME you can view event using event monitoring and disply also historic event. Does someone knows if this event are stored on SSM module or on the IME Database (on local PC) ? There is the possibility to manage the Max size of the event monitored and archive them ? This event can be sent by the SSM module using syslog messages ?

1 REPLY
Gold

Re: IPS ASA-SSM-20 and IME

Signature alerts are transfered from the AIP-SSM module to your PC running IME and the alerts are achived in a local PC database. The events will persist in a circular buffer on the AIM-SSM module for a short peroid of time, untill they are overwritten. You can not configure the size of the AIP-SSM event store.

You can not send Syslogs for any alerts or events from the sensor. SNMP traps are spported, but you have to set that action on a signature by signature basis.

377
Views
0
Helpful
1
Replies
CreatePlease to create content