topic IPS in Transparent Mode in Network Security

IPS in Transparent Mode

lcaruso — Tue, 12 Mar 2019 00:39:37 GMT

Hi,

I need to know if the 5512X IPS will work if the ASA is in transparent mode and/or any limitations.

Thanks.

IPS in Transparent Mode

Julio Carvajal — Fri, 21 Dec 2012 05:59:42 GMT

Hello,

Yes, it can definetly run on transparent mode

An ASA in transparent mode can run an AIP. In the event the AIP fails,

the IPS will fail-open and the ASA will continue to pass traffic.
However, if an interface or cable fails, then traffic will stop.  You
would need a failover pair to account for this failure event, which
means another ASA and matching AIP."

Regards,

Julio

Re: IPS in Transparent Mode

lcaruso — Mon, 24 Dec 2012 18:32:50 GMT

Hi Julio,

I understand in Transparent Mode the ASA can only have one ip address on it. Does that include the IPS SSP as well?

Will I be able to setup the IPS to get its updates, global correlation, ntp and such if the ASA only has one ip address?

Will I be able to meet the requirements to manage the IPS with IME?

Thanks.

Re: IPS in Transparent Mode

Julio Carvajal — Mon, 24 Dec 2012 23:39:41 GMT

Hello Lcaruso,

Starting on ASA 8.4 on transparent mode you can have more than one Ip as you will be using Bridge-groups, also the managment interface will have it own dedicated Ip address.

The AIP-SSM will be fully fucntional whether you have it on transparent mode or not,

Regards,

Julio

Re: IPS in Transparent Mode

lcaruso — Tue, 25 Dec 2012 01:35:26 GMT

So I can have bridge groups and assign an ip address to the management interface and setup the IPS just like a routed firewall? Guess I've got some reading to do.

Re: IPS in Transparent Mode

Julio Carvajal — Tue, 25 Dec 2012 02:05:07 GMT

Hello Lcaruso,

Exactly you got it

Yeah but reading is not that bad when you know what you are looking for

Have a good one