topic Firepower IPS Basics in Network Security

Firepower IPS Basics

adamgibs7 — Tue, 12 Mar 2019 12:57:38 GMT

Dears,

I am configuring ASA 5525 with firepower (IPS) the box is out of the network before I put live I need to configure IPS in a professional way and to avoid any packets drops for the live network, can anybody guide me to configure IPS basic default setting which will avoid any packets drops.

thanks

Hi,

Aastha Bhardwaj — Tue, 05 Apr 2016 14:10:28 GMT

Hi,

Refer link : http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

On ASA :

ciscoasa(config)# policy-map global_policy
ciscoasa(config-pmap)# class sfr
ciscoasa(config-pmap-c)# sfr fail-open monitor-only.

You can set the traffic to monitor only so that it forwards the copy of packet and does not take any action on the packets.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

Hello,

adamgibs7 — Thu, 07 Apr 2016 13:49:38 GMT

Hello,

I have been through this link,i want the IPS to be inline instead of monitor-only but I want to know which rules should be enabled and which should not be.

thanks