topic 5512 IPS in Network Security

5512 IPS

James Hoggard — Sun, 10 Mar 2019 13:05:40 GMT

I currently have a cisco ASA 5512 with IPS.

I have eth0 connected to my WAN

eth1 connected to my LAN ( Switch ) 10.0.0.254

I have setup my sensor on 10.0.0.253 which seems to be on the management interface?

Currently i don't use the managment interface for anything but now i have configured this will i have to plug the management interface into my lan?

just confused to how it will check the trafffic as anything coming from the outside ( internet ) wll go via eth0 which goes to eth1 internal?

Don't understand how the management interface will be able to check against attacks? obviously i will be using inline mode.

Thanks

5512 IPS

James Hoggard — Wed, 20 Nov 2013 10:29:56 GMT

just to add on the cisco IDM interface is shows Management0/0 assigned virtual sesnor 0 NONE

Then i have portchannel0/0 backplane interface that is assigned virtual sensor 0 VS0

5512 IPS

James Hoggard — Wed, 20 Nov 2013 11:58:40 GMT

ok think i have anwsered my own question.

the management0/0 is just simply i was of giving me access to the IDS. the actual sensor maps to port channel0/0 (backplane) so anything go through the ASA will go via the sensor.