AIP-SSM module

[gnaveen]

How easy it is to install AIP-SSM module on ASA 5510 running 8.0(5)?

Can the ASA 5510 work effectively as a Firewall and IPS at the same time?

Will installing AIP-SSM module effect ASA 5510 performance in any form?

-NG

[Jitendriya Athavale]

aip ssm is pretty simple to install all you need to do is first configure management access to it and then you can send traffic to the module by specifying it in class map

there will be some/little preformance impact mainly because traffic has to go through the module after being processed by asa, but it is not too noticible if your isp is free of out of order packets

this link should help you

http://www.cisco.com/en/US/docs/security/ips/5.0/configuration/guide/cli/clissm.html

[Eduardo Aliaga]

ASA don-t work like firewall and IPS at the same time. ASA works only like a firewall. On the other hand, AIP-SSM module which only works as an IPS.

AIP/SSM has its own operating system , different from ASA OS.

Think of AIP SSM like a Cisco IPS appliance which happens to be"racked" within ASA, but still both are different hardware and different software.

[Stijn Vanveerdeghem]

Click the below link to see a couple of screencast videos illustrating the initial config of AIP-SSM modules.

https://supportforums.cisco.com/docs/DOC-12233

[nlkarthik]

Hello Stijn,

  The videos are not loading. It shows some error. Could you pls assist on this. Thanks !!

regards,

Karthik