topic Testing IPS modules on ASA 5505 in Network Security

Testing IPS modules on ASA 5505

Christopher Clark — Sun, 10 Mar 2019 12:39:35 GMT

How do you all test the IPS traffic on the AIP-SSC5 in a 5505, since the default signatures are retired and you can't unretire them, one cannot enable the signatures 2000-2012 on the 5505.

Differences Between the

Saurav Lodh — Thu, 13 Mar 2014 06:13:58 GMT

Differences Between the Modules

The IPS module for the ASA 5510 and higher supports higher performance requirements, while the IPS module for the ASA 5505 is designed for a small office installation. The following features are supported for the ASA 5510 and higher, and not for the ASA 5505:

•Virtual sensors

•Anomaly detection

•Unretirement of default retired signatures

Look at the web-signatures.

Karsten Iwen — Thu, 13 Mar 2014 07:19:40 GMT

Look at the web-signatures. There are a couple of them that shoudn't be retired. For example attacks like directory-traversal or access of cmd.exe. These can be easily tested in a browser or with a vulnerability scanner like nessus.