topic Re: Inline NGIPSv in Network Security

Inline NGIPSv

Daniel Lucas — Fri, 21 Feb 2020 15:31:14 GMT

I have an ASAv with a trunk port-group going to it, and I am looking to move an NGIPSv inline between it and the internal resources. I had some questions I am having trouble finding a definitive answer for.

Does the NGIPS virtual appliance support VLAN bridging? i.e. traffic ingress one VLAN/Port-Group and egress a different VLAN/Port-Group.

Or is creating two separate vSwitches, and having the NGIPS positioned inbetween them the only way to get it inline? (which is how the cisco deployment guide shows it).

-Thanks

Re: Inline NGIPSv

yogdhanu — Thu, 15 Mar 2018 19:36:37 GMT

Hi Daniel,

The option for VLAN bridging is with virtual switching which is not available for NGIPS virtual.

So the only other way is to place the NGIPSv between the vSwitches.

Rate if helps,

Yogesh

Re: Inline NGIPSv

Daniel Lucas — Thu, 15 Mar 2018 19:39:21 GMT

Ok thanks for the information

Re: Inline NGIPSv

moseygilbert — Mon, 12 Nov 2018 22:04:32 GMT

Do you know of a guide that shows the steps required to make the NGIPSv inline with ASAv interfaces?

Re: Inline NGIPSv

Daniel Lucas — Fri, 16 Nov 2018 20:11:53 GMT

No exact guide that I am aware of - However, this guide basically lays it out, but the VM just happens to be an ASAv
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/quick_start/ngips_virtual/NGIPSv-quick/deployment-ngipsv.html#pgfId-3394506