topic idsm , fwsm in Network Security

idsm , fwsm

mirehteshamali — Mon, 11 Mar 2019 20:20:05 GMT

Hi all

we have the following senario ,

cisco 6509 is connected to internet we need to secure our internal LAN segments .with IDSM and FWSM moudules.

internet ------>IDSM------>FWSM

plz suggest some confiugration links for IDSM , FWSM configuration

also suggest best practises we plan to keep IDSM IN proimiscouss mode.

thanks

Re: idsm , fwsm

Marcin Latosiewicz — Wed, 13 Apr 2011 06:44:32 GMT

Hi,

First of all please note that the design you're suggesting is not the best.

IDSM does more in-depth packet analsysis and thus has a lower performance cap (500Mbit/s as opposed to theoretical 5Mbit/s for FWSM). In real life what I would suggest to do is put the IDSM in promiscous mode for vlan(s) behind FWSM and not in front.

With IDSM in promiscous mode there is no interaction between the modules and they can be configured separately according to configuration guides and depending on versions.

For reference:

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_idsm2.html

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/fwsm_cfg.html

Marcin

Re: idsm , fwsm

mirehteshamali — Wed, 13 Apr 2011 08:53:32 GMT

Thanks for the reply

just wanted to know the following

what is default password for idsm2 and fwsm

i guess their is no default password for fwsm

also let me know how do we log on tho IDSM or fwsm ?

do the modules have seprate console ports ?

or do we need to first connect to 6500 and then issue session command to move to IDSM ? fwsm ?

further where is console port on 6500 loacsted on supervisor engine ?

thanks

Re: idsm , fwsm

Marcin Latosiewicz — Wed, 13 Apr 2011 09:08:26 GMT

Hi,

As for default username and password it's the same as anywehere - cisco.

Did you have a look at the documents I sent you? There an instruction on how to configure and how to get to those devices. You use the chassis or SSH/telnet/HTTPS directly once basic configuration is done.

FWSM has a physical console port but it's ON the blade (not on the front panel).

The console port doesn't have to be in uniform place accross different supervisors, it is always however labeled "console" (at least on blades from last 4-5 years) 🙂

Marcin