10-27-2006 06:02 AM - edited 03-10-2019 03:18 AM
Hi everyone, i have a trouble, now iam using an ASA 5510 with AIP-SSM10, my problem is when I redirect the traffic to the AIP-SSM for detects attacks, i probe it and then I look in the events logs of the IPS, and the sensor dont detect nothing, is necessary to install an IPS license??, it is for my own project, thanks.
10-30-2006 06:11 AM
I've got the same problem over here...
The licence is not yet arrived but wanted to test de AIP.
10-30-2006 08:56 AM
Unless you are scanning across the ASA, the SSM module will not "see" the scan and cannot produce events. To alarm on an SSM module, you must scan from one network to another. Basically, the SSM cannot do promiscuous monitoring. I would recommend an IPS appliance if you want to monitor traffic sent between hosts of the same network.
** Pls rate if this helps **
10-31-2006 01:29 AM
I solved my "problem".
I hadn't added a real interface to the Virtual Sensor (vs0).
Now my configuration is working!
This all without a license
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide