topic Changing IPS from promiscous mode to Inline mode in Network Security https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331776#M53373 <HTML><HEAD></HEAD><BODY><P> Thanks Karsten.</P></BODY></HTML> Mon, 30 Sep 2013 14:18:24 GMT smetieh001 2013-09-30T14:18:24Z Changing IPS from promiscous mode to Inline mode https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331774#M53364 <P>Hi Experts,</P><P></P><P>We are changing our IPS (aip-ssm10) mode of operation from promiscous to Inline mode. Is there any caveats or anything i need to take into consideration before doing the switch? Is there a possibility to roll back incase something doesn't go the way we planned?</P><P></P><P>I look forward to your responses.</P> Sun, 10 Mar 2019 13:03:36 GMT https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331774#M53364 smetieh001 2019-03-10T13:03:36Z Re: Changing IPS from promiscous mode to Inline mode https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331775#M53371 <HTML><HEAD></HEAD><BODY><P>changing from promiscous to inline and back is done with the ips-command in the ASA MPF-config. So if you run into problems you can easily switch back.<BR /><BR />What you should do before changing to inline:<BR />- check your alerts for false positives and eliminate them first.<BR />- if you can't eliminate all, make sure that the risk-rating doesn't exeed the threshold for the automatic deny-action if configured.<BR />- and of course keep monitoring your events after the switch to inline.<BR /><BR /><BR />Sent from Cisco Technical Support iPad App</P></BODY></HTML> Fri, 27 Sep 2013 08:37:20 GMT https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331775#M53371 Karsten Iwen 2013-09-27T08:37:20Z Changing IPS from promiscous mode to Inline mode https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331776#M53373 <HTML><HEAD></HEAD><BODY><P> Thanks Karsten.</P></BODY></HTML> Mon, 30 Sep 2013 14:18:24 GMT https://community.cisco.com/t5/network-security/changing-ips-from-promiscous-mode-to-inline-mode/m-p/2331776#M53373 smetieh001 2013-09-30T14:18:24Z