Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Just brought a SSM online

I just brought an SSM online.  I think it is working but when I go in the module and do a show statistics I really don't see anything?  Am I looking in the wrong place?  Can you see a better representation of what is going on from the ASDM?

Harrison

2 REPLIES
Cisco Employee

Re: Just brought a SSM online

Hi,

On the ASA, please do a "show service-policy" to see if packets are being re-directed to the SSM module. On the sensor, you can look at the output of "show statictics virtual-sensor" to see how if packets are being processes by the module.

Hope this helps!!

Thanks and Regards,

Prapanch

Cisco Employee

Re: Just brought a SSM online

You can also run a packet tracer for an imaginary packet and see if it is going to hit your SSM module.

To divert traffic from the ASA ro the module you will need something like

access-list ssm-acl extended permit 

class-map csc-class
match access-list ssm-acl

policy-map global_policy
class ssm-class
  csc fail-open

I hope it helps.

PK

269
Views
0
Helpful
2
Replies