topic Re: traffic doesn't flow through IPS in Network Security

traffic doesn't flow through IPS

ravisambaji — Sun, 10 Mar 2019 11:14:43 GMT

my connectivity is like this

switch-->IPS-->ASA

i have configured the sensing interfaces in IPS to be in promiscous mode, but the traffic is not passing through

if i try to ping from switch to ASA through IPS it doesn't ping

if i bypass the IPS and connect the switch directly to ASA, i can ping ASA

please suggest what could be the issue

iam new to the IPS

Thanks Ravi

Farrukh Haroon — Tue, 12 Aug 2008 14:16:51 GMT

The topology you describe is for Physical Inline Interface Pair and not for Promiscuous mode.

switch-->IPS-->ASA

Have a look at this:

A Promiscuous mode topology is something like:

IPS<----SPAN/VACL----switch------>ASA

Regards

Farrukh