Note : This example is for “inline mode.” See Operating Modes for information about “promiscuous mode,” where the ASA only sends a copy of the traffic to the ASA IPS module.Ĥ. When you identify traffic for IPS inspection on the ASA, traffic flows through the ASA and the ASA IPS module as follows. Traffic goes through the firewall checks before being forwarded to the ASA IPS module. However, the overall through-put of the ASA is not increased. The ASA IPS SSP on the ASA 5585-X includes data interfaces these interfaces provide additional port-density for the ASA. The ASA IPS module might include an external management interface so you can connect to the ASA IPS module directly if it does not have a management interface, you can connect to the ASA IPS module through the ASA interface.
The ASA IPS module runs a separate application from the ASA. How the ASA IPS Module Works wit h the ASA This section includes the following topics:
#Cisco asa asdm system reload software
The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion prevention services to stop malicious traffic, including worms and network viruses, before they can affect your network. This chapter includes the following sections: For a list of supported ASA IPS modules per ASA model, see the Cisco ASA Compatibility Matrix : The ASA IPS module might be a hardware module or a software module, depending on your ASA model.
#Cisco asa asdm system reload how to
This chapter describes how to configure the ASA IPS module.
0 kommentar(er)
