IDSM-2/FWSM

Rodrigo Gurriti — Mon, 11 Mar 2019 21:11:38 GMT

Hello,

I have a question on the IDSM-2/FWSM:

How can I inspect inline the FWSM outside/dmz interfaces?

I followed this doc http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_idsm2.html#wp1068377

I understand that I'm bridging the L2 with the L3 Vlans, but on the FWSM how would that work ?

I have 2 L2 vlans:

Vlan 20 the outside with my ISP router on the segment.
Vlan 60 the DMZ with a couple servers.

My FWSM config:

firewall multiple-vlan-interfaces

firewall module 1 vlan-group 10

firewall vlan-group 10 20,50,60,100

interface Vlan20

no ip address

shutdown

interface Vlan60

no ip address

shutdown

IDSM-2/FWSM

Parminder Sian — Mon, 22 Aug 2011 06:55:02 GMT

Hi Rodrigo,

First of, IDSM and FWSM are two different devices, if you want to inspect inline traffic, be it actual interfaces or VLAN's, you need and IPS/IDSM not FWSM

In your case, you have IDSM and following configuration should do the trick:-

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_idsm2.html#wp1067639

Hope this helps,

Sian

topic IDSM-2/FWSM in Network Security

IDSM-2/FWSM

IDSM-2/FWSM