cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


582
Views
0
Helpful
1
Replies
Highlighted
Contributor

Hi Can anyone explain how IPS works in ASA firewalls and SSL/IPSEC VPN configurations?

Hi..

       Hi Can anyone explain how IPS works in ASA firewalls and SSL/IPSEC VPN configurations?

1 REPLY 1
VIP Mentor

Hi Can anyone explain how IPS works in ASA firewalls and SSL/IPS

You have to distinguish three scenarios:

1) IPSec/SSL through the ASA with the IPS-module

The IPS can not look into the encrypted traffic, but can analyse the cleartext-headers for attacks. To inspect the payload you need an IPS-apliance that sits behind the VPN-termination-point.

2) IPSec and SSL-VPNs (tunneled) that are terminated on the ASA

This traffic can be inspected by the IPS-module in the ASA.

3) clientless SSL terminated on the ASA

This traffic is not inspected by the IPS-module in the ASA.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here