topic Re: connecting to IPS with ASDM in Network Security

connecting to IPS with ASDM

nkariyawasam — Sun, 10 Mar 2019 11:17:49 GMT

I am doing ASA5510 with IPS, initial setup. I can access ASA from ASDM. But when I click the IPS tab in ASDM, it will retrieve the management IP of the IPS, but finally says "unable to connect".

I tried even chaning management IP using CLI, still no luck.

Any ideas ?

Re: connecting to IPS with ASDM

suschoud — Mon, 15 Sep 2008 12:57:29 GMT

Hi,

Is the management interface of SSM connected to your local lan.At the back of asa,where aip-ssm is plugged in,you would see a management interface.This management interface should have a cable running to your local lan switch or router.There has to be a connectivity from local lan to the management interface so that aip-ssm info. could be retrieved.

Please rate if helps. 🙂

Regards,

Sushil

Re: connecting to IPS with ASDM

rhermes — Mon, 15 Sep 2008 15:15:29 GMT

In addition to connecting the AIP-SSM to your LAN, as Sushil suggested, you will need to assign an IP address, netmask, gateway and place your management host's IP address into the AIP-SSM's allowed hosts list. You can do all this by connecting to the AIP-SSM via the ASA using the "session 1" command, loging in (cisco/cisco by default) and running "setup".

Re: connecting to IPS with ASDM

nkariyawasam — Tue, 16 Sep 2008 04:28:43 GMT

Thanks for both answers! I was able to connect though management iontarface, connected to the LAN. I wonder is there any way that I can connect to AIP-SSM internally ( ie using the ASDM conneciton alone) , without actually using the management interface.

Re: connecting to IPS with ASDM

suschoud — Tue, 16 Sep 2008 11:43:24 GMT

That would not be possible.ASDM open on ur w/station connects to ips through the management interface of ssm.You can treat this as a separate connection initiated by asdm s/w to the ip address of ssm from the w/station.

Regards,

Sushil

Re: connecting to IPS with ASDM

new_networker — Sat, 06 Dec 2008 18:11:31 GMT

Is it necessary to access the management interface from ASDM via the same network. Or can it be a different network as well.

In my case, the pings from other network are going through but the telnet to port 443 is not responding. It is however responding from the same network as management interface. Is there a restriction like this ?

Thanks.

Re: connecting to IPS with ASDM

rhermes — Mon, 08 Dec 2008 17:08:03 GMT

The ASA management interface can be on a different network from the AIP-SSM Management network address.

Check the allowed hosts on your IPS module, you might be denying access to the network/host that can't https to your sensor.