topic IDSM-2 issues in Network Security https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046528#M54701 <HTML><HEAD></HEAD><BODY><P>Ideally IPS should be behind the firewall, but depeds on your deployment scenario.</P><P></P><P>What kind of signature do you see firing on IDSM-2 ?</P><P>(Check via "show stats virtual-sensor")</P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/security/asa/quick_start/ips/ips_qsg.html">http://www.cisco.com/en/US/docs/security/asa/quick_start/ips/ips_qsg.html</A></P><P><EM>"Traffic goes through the firewall checks before being forwarded to the IPS module."</EM></P><P></P><P>Regards,</P><P>Sawan Gupta</P></BODY></HTML> Sat, 01 Sep 2012 02:59:58 GMT sawgupta 2012-09-01T02:59:58Z IDSM-2 issues https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046527#M54700 <P></P><P>I'm having issues where the IDSM-2 is blocking internal users from accessing the internet. When I run a report, I see TCP OVERWRITE errors on the PAT'd address of the firewall (FWSM). I have to reboot the IDSM-2 to get it working again... I'm running the IDSM-2 "inline".</P><P></P><P>Cisco is telling me that I should put the IDSM-2 behind the firewall but isn't that allowing bad traffic to hit the firewall? </P><P></P><P></P><P></P><P></P><P></P><P>Sent from Cisco Technical Support iPad App</P> Sun, 10 Mar 2019 12:45:54 GMT https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046527#M54700 Garrison Botts 2019-03-10T12:45:54Z IDSM-2 issues https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046528#M54701 <HTML><HEAD></HEAD><BODY><P>Ideally IPS should be behind the firewall, but depeds on your deployment scenario.</P><P></P><P>What kind of signature do you see firing on IDSM-2 ?</P><P>(Check via "show stats virtual-sensor")</P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/security/asa/quick_start/ips/ips_qsg.html">http://www.cisco.com/en/US/docs/security/asa/quick_start/ips/ips_qsg.html</A></P><P><EM>"Traffic goes through the firewall checks before being forwarded to the IPS module."</EM></P><P></P><P>Regards,</P><P>Sawan Gupta</P></BODY></HTML> Sat, 01 Sep 2012 02:59:58 GMT https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046528#M54701 sawgupta 2012-09-01T02:59:58Z Re: IDSM-2 issues https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046529#M54702 <HTML><HEAD></HEAD><BODY><P>TCP Overwrite signature 1300/0</P><P></P><P></P><P></P><P>Sent from Cisco Technical Support iPad App</P></BODY></HTML> Sat, 01 Sep 2012 17:18:00 GMT https://community.cisco.com/t5/network-security/idsm-2-issues/m-p/2046529#M54702 Garrison Botts 2012-09-01T17:18:00Z