ASA 5505 without IPS can't remove some IPS configurations

[wonder-cisco]

Hello,

I have an ASA 5505 without any IPS module.

While copy/pasting some configurations from another 5510 with IPS I copied my mistake the some of the IPS configurations part. Now I can't remove it.

When ASA starts I get this Warning:

...WARNING> IPS policy is configured without an SSM card.

*** Output from config line 828, "  ips inline fail open"

Those lines are:

policy-map Outside_Policy

     class IPS_class

          ips inline fail-open

When I try to do "no ips inline fail-open" I get an "invalid input detected".

If I try a no class IPS_class I get that is being in use.

What can I do to clean up those lines?

Many Thanks.

[julomban]

Hello Sergio,

Can you remove the service policy first and then the class? You can issue the show run service-policy command and remove the one called "Outside_Policy".

Let me know if after that you are able to remove the class.

Regards,

Juan Lombana

Please rate helpful posts.

[wonder-cisco]

I get "Outside_Policy is being used and hence cannot be removed".

[julomban]

Hello Sergio,

Can you share the show run output from your ASA?

Regards.

Juan Lombana

Please rate helpful posts.

[wonder-cisco]

Hi!, i've attached the output.

[julomban]

Sergio,

You already try the command below right?

policy-map Outside_Policy

no class IPS_class

My guessing is that process is stuck on the FW and you may need to reload the unit.

Go ahead and reload the ASA appliance and let us know if after the reload the command is still on the config or if you can remove them.

Regards,

Juan Lombana

Please rate helpful posts.

[wonder-cisco]

Thank you very much for your help.

Unfortuntally, keep stucked. Firewall is not into production yet and I did a coulple of reloads so far.

[wonder-cisco]

Ok, I've fixed by doing a backup/restore without those 3 lines...

Many thanks for your help.

[julomban]

Sergio,

Good to know that, it make sense if you have a old config saved.

Regard,

Juan Lombana

Please rate helpful posts.