topic Thanks Vibhor for your help, in Network Security

Help - ips

Anukalp S — Tue, 12 Mar 2019 04:53:38 GMT

Hi experts... pls help me in setting up IPS in ASA 5525. We are running ASA in HA mode. ASA has inbuilt IPS module. When i login in ASDM i dont see IPS option in configuration. I need to setup IPS and insall license on it. Pls help me in this.

ASA# dir flash:

Directory of disk0:/

11     drwx 4096         13:59:26 Apr 26 2014 log
22     drwx 4096         21:00:19 Aug 13 2014 crypto_archive
23     drwx 4096         14:00:02 Apr 26 2014 coredumpinfo
113    -rwx 38191104     14:02:40 Apr 26 2014 asa912-smp-k8.bin
114    -rwx 18097844     14:06:42 Apr 26 2014 asdm-713.bin
115    drwx 4096         15:40:46 Jun 12 2014 tmp
128    -rwx 45854720     17:04:38 Oct 09 2014 IPS-SSP_5525-K9-sys-1.1-a-7.1-6-E4.aip
116    -rwx 12998641     14:11:48 Apr 26 2014 csd_3.5.2008-k9.pkg
117    drwx 4096         14:11:48 Apr 26 2014 sdesktop

ASA# sh module | i ips
ips Unknown                                      N/A
ips Unknown                        No Image Present Not Applicable
ips Unresponsive       Not Applicable
ips IPS Module     Disabled        perpetual

Hi,You would first need to

Vibhor Amrodia — Fri, 10 Oct 2014 03:00:27 GMT

Hi,

You would first need to activate the IPS module license on the ASA device. After that you would see the IPS enabled in the output.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/modules_ips.html#pgfId-1104578

Then you can follow this guide to configure or setup the IPS module:-

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/ips/ips_qsg.html

Let me know if you have any other queries.

Thanks and Regards,

Vibhor Amrodia

Thanks Vibhor for your help,

Anukalp S — Fri, 10 Oct 2014 11:29:10 GMT

Thanks Vibhor for your help, pls guide me how to activate license to enable IPS.

pls share procedure.

Hi. I am going to execute

Anukalp S — Fri, 10 Oct 2014 14:16:34 GMT

Hi. I am going to execute below command to install and load the IPS module software but need to confirm that this command would not reload or erase configuration of ASA. pls confirm.

"sw-module module ips recover boot"