AIP-SSM on contexts or transparent

[PAUL GILBERT ARIAS]

Hello,

I would like to know if its possible to have an AIP-SSM module on a ASA configured in trasparent mode and if its possible to have it in multiple contexts. Two different scenarios. The client wants to know that and I would like to see it on a Cisco document if possible. I think both scenarios are possible but I haven't found any document.

Thanks,

Paul

[CY1234 · Accepted solution]

Hi Paul,

Here is the link which explains how you can configure multiple virtual sensors and as you can see it is supported on both routed and transaprent mode.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/ips.html#wp1087111

Hope this helps.

Thanks,

--Sunil

[PAUL GILBERT ARIAS]

It helped. Thanks a lot my friend.

[Jia Liu]

Yes, you can have an AIP-SSM module on an ASA configured in transparent mode or in multiple contexts.  I could not find a document that mentions trasnparent mode but you'll see reference to multiple context in the documents below:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ssm.html#wp1097278

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ssm.html#wp1091984