topic Re: Is IDS/IPS part of a default ASA 5505? in Network Security

Is IDS/IPS part of a default ASA 5505?

scubaed13 — Sun, 10 Mar 2019 11:55:54 GMT

I am taking over a customer, and they want to know about the potential of a IDS/IPS

with their ASA5505. But, I can't tell if it's default or an additional license.

Re: Is IDS/IPS part of a default ASA 5505?

Panos Kampanakis — Fri, 19 Mar 2010 20:18:19 GMT

The IPS cards for the 5505s are sold separately.

I hope it answers the question.

Re: Is IDS/IPS part of a default ASA 5505?

scubaed13 — Fri, 19 Mar 2010 20:38:35 GMT

The way I have come to understand it, there is a basic set of signatures, DOS Attacks, etc., that are included, but the fancier application layer stuff is additional, correct?

Re: Is IDS/IPS part of a default ASA 5505?

Jennifer Halim — Sat, 03 Apr 2010 13:35:18 GMT

Not really, there are no basic signature on the ASA itself. ASA has inspection engine for a few protocols but it has different functionality to IPS inspection engine. Here is the ASA inspection if you are interested:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i2.html

In regards to DOS attacks, there is basic threat detection in ASA, and here is the URL for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/t.html#wp1482339

Hope that helps.

Re: Is IDS/IPS part of a default ASA 5505?

trippi — Mon, 05 Apr 2010 18:52:17 GMT

There are basic IPS signatures in the base ASA code/feature set.

See attached picture of IPS Signatures in my ASDM.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_protect.html#wp1056358