topic ASA 5525-X IPS with Transparent Mode in Network Security

ASA 5525-X IPS with Transparent Mode

avilt — Tue, 12 Mar 2019 03:11:14 GMT

Can I implement the new ASA 5525-X IPS in transparent mode? Can I still have fail open features with it? What are the pros and cons with this mode?

Julio Carvajal — Sun, 01 Dec 2013 18:30:46 GMT

Hello,

Sure you can.

Regarding the IPS and Firewall there are no such restrictions.

Restrictions would be with the way the ASA behaves.

EX:

No VPN support

No routing protocols.

Stuff like that buddy

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

avilt — Sun, 01 Dec 2013 19:30:07 GMT

So all I need to do is from the active firewall inside interface--> connect it to ASA IPS ----> L3 switch.

IPS will be active only when the primary firewall is active.

Do I need to allow any specific rules on IPS for the ASA HA pair to work when I insert IPS in between primary and the L3 switch?

Julio Carvajal — Sun, 01 Dec 2013 21:33:31 GMT

Hello,

Remember that the ASA 5500-X Family use a software based IPS. So no physical interface to connect but logicals.

Now, you are talking about fail-over between ASAs. Before was fail-open and fail-closed with the IPS itself.

The answer to the last question is yes, if the active ASA fails then the ASA will too. There will be a switchover.

No special rules, no worry. From the IPS perspective it will work the same.

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

avilt — Mon, 02 Dec 2013 04:24:46 GMT

Can I have ASA-IPS in inline mode with transparent mode as well?

Julio Carvajal — Mon, 02 Dec 2013 04:37:11 GMT

Hello,

That for sure, no problem.

The IPS can sit inline

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com