topic Re: AIP-SSM10 Management in Network Security

AIP-SSM10 Management

Cesar_Cepeda — Sun, 10 Mar 2019 10:52:45 GMT

HI,

I have an ASA 5520 with AIP-SSM10, I have configure AIP module with setup, but I dont have access through the ASDM to IPS, I only have access through cli session 1 comand.

How can I acces the module through the ASDM.

Re: AIP-SSM10 Management

rhermes — Mon, 19 Nov 2007 20:07:26 GMT

Cesar -

You can't manage the SSM modules via the ASDM.

The SSM-10 modules are a stand alone IPS device and have their own GUI called IDSM. Give the module a physical network connection (the jack on the card is for management), fire up your web browser and point it at the management IP address you configured on the SSM when you ran "setup".

Re: AIP-SSM10 Management

Cesar_Cepeda — Mon, 19 Nov 2007 22:47:57 GMT

OK, I have tried to connect the AIP-SSM10 configuration interface through the management port but I cant. I can ping from the module to the PC but from PC to the module cant connect.

Some suggestion.

Re: AIP-SSM10 Management

rhermes — Tue, 20 Nov 2007 17:30:39 GMT

Get on the sensor console of the SSM-10 and add the IP address of your PC into the "allowed hosts" on the SSM-10.

Running "setup" might be the easy way to do this.

Re: AIP-SSM10 Management

Cesar_Cepeda — Wed, 21 Nov 2007 14:10:14 GMT

Thanks that had done, but now I have a question about how should be the ips address of ASA and the AIP-SSM10.

I have configured the IP of AIP-SSM10 whit an IP in same network that inside conect those two ports to a switch, in that switch I connected my PC in the inside network and can management the AIP-SSM10 from ASDM, this config is correct???? or what should be the ip address schemme

Re: AIP-SSM10 Management

rhermes — Fri, 23 Nov 2007 16:17:01 GMT

It sounds like you have the AIP-SSM connected and addressed properly. I would make your command and control network at least a /29 so that you have enough IP addresses for your AIP-SSM, the ASA and your PC.

If you have everything set up properly, you should be able to ping and https: to your AIP-SSM

Re: AIP-SSM10 Management

acomiskey — Tue, 27 Nov 2007 21:57:34 GMT

That is not true. You CAN manage the ssm module through the ASDM.

Re: AIP-SSM10 Management

jim.sellers — Wed, 28 Nov 2007 16:27:42 GMT

You are correct. IDM, CLI, or ASDM can all be used to manage the AIP-SSM.

Re: AIP-SSM10 Management

jim.sellers — Wed, 28 Nov 2007 16:28:11 GMT

one thing to make sure you do is set the IPS ACL or you wont be able to connect to it.