topic The IPS module uses the in Network Security

Unable to run IPS module from ASA inside interface

mudasir05 — Tue, 12 Mar 2019 07:38:43 GMT

Hello All,

I tried to run IPS IDM of my ASA 5545 from the inside interface however its not.....its saying "problem loading sensor"

Also i am able to access IPS from the command line but not through the IDM.

Any help would be highly appreciated.

Thanks

The IPS module uses the

Philip D'Ath — Thu, 21 Apr 2016 08:48:40 GMT

The IPS module uses the management interface on the ASA. Have you definitely got this plugged in?

Hello Philip,

mudasir05 — Thu, 21 Apr 2016 09:54:56 GMT

Hello Philip,

Actually the case is that i am using my ASDM via the inside interface of the ASA,so i want to access the IPS module using the same interface....my management interface is not connected to anything..

thanks

Hello,

Kornelia Gutierrez — Thu, 21 Apr 2016 14:25:30 GMT

Hello,

If you want to access the IPS using an ip address on the same range of the inside interface of the ASA, you will need to configure the IPS with an ip address on the inside range and connect the management interface of the ASA to the same switch that the inside interface is connected to, turn on the management interface by issuing the no shutdown command, but do not configure on the management interface nameif, security level and ip address.

Hope this helps...

As it has been mentioned by

Marius Gunnerud — Thu, 21 Apr 2016 15:29:05 GMT

As it has been mentioned by other posters, IPS can only be managed via the management interface on the ASA so you MUST connect the management interface to the network, as well as configure the IPS with a management IP.

Please remember to select a correct answer and rate helpful posts

Hello,

mudasir05 — Mon, 25 Apr 2016 14:47:02 GMT

Hello,

I configured the IPS with the same ip address as on the inside range and connected the management interface to the same switch with no nameif,security level and ip address.,

however i am still not able to connect to the IPS saying

"error connecting to the Sensor..error loading sensor"

Thanks

i can however access the IPS

mudasir05 — Mon, 25 Apr 2016 14:55:08 GMT

i can however access the IPS from the command line via ASA using session command. from IPS i cannot next hop which is ASA firewall itself.... ASA_IPS# ping 192.168.5.1 PING 192.168.5.1 (192.168.5.1): 56 data bytes --- 192.168.5.1 ping statistics --- 4 packets transmitted, 0 packets received, 100% packet loss thanks

You will always be able to

Marius Gunnerud — Mon, 25 Apr 2016 15:12:49 GMT

You will always be able to access the IPS from the ASA using session as it is like a console access.

I think you have forgotten to add the allowed subnet / IP to access the IPS in the configuration.

conf t

service host

network

access-list xxx.xxx.xxx.xxx/yy

replace the x's with the actual IP or subnet you are managing the IPS from and replace the /yy with the subnet mask you are using.

Please remember to select a correct answer and rate helpful posts

Hello All,Do i need to

mudasir05 — Mon, 25 Apr 2016 15:49:43 GMT

Hello All,

Do i need to configure this on ASA?
Also let me know use of the Service host command?

Thanks

This is done on the IPS .

Marius Gunnerud — Mon, 25 Apr 2016 15:58:29 GMT

This is done on the IPS .

The service host command is the command to get into the section where you configure management of the IPS, hostname, NTP, etc.

Please remember to select a correct answer and rate helpful posts

Hello,

mudasir05 — Mon, 25 Apr 2016 16:54:23 GMT

Hello,

This is already done by me.....i allowed the subnet as well in the access-list.

Still dont know where i am going wrong...

as i told you i am not able to ping next hop from the IPS.

Thanks

Could you provide the full

Marius Gunnerud — Mon, 25 Apr 2016 17:17:49 GMT

Could you provide the full configuration of the ASA please.

show configuration

Also, have you placed the switchport the management interface is connected to in the correct VLAN?

Please remember to select a correct answer and rate helpful posts

Hello Marius,

mudasir05 — Tue, 26 Apr 2016 06:45:12 GMT

Hello Marius,

Sorry to say can't post whole config as this is our production firewall...

let me know if you need some specific outputs...

Thanks

Can you confirm that you have

Marius Gunnerud — Mon, 02 May 2016 11:51:38 GMT

Can you confirm that you have the management interface connected to the network please.

Please remember to select a correct answer and rate helpful posts