ASA IPS 5525

[carl_townshend]

Hi all

I have a few things

If I have an ASA 5525 with the ips licence, first of all

1.how do I enable and disable the IPS module?

2.do I connect to it by typing session ips ?

3.by default are the interfaces in promiscous mode, how do I put them to inline mode ?

cheers

[Karsten Iwen · Accepted solution]

1.how do I enable and disable the IPS module? 

You enable the IPS by installing the license and then sending traffic to the module in the modular policy framework (MPF)

2.do I connect to it by typing session ips ?

asa# session ips

3.by default are the interfaces in promiscous mode, how do I put them to inline mode ?

That's controlled on the ASA with the MPF.

There is an extra chapter in the config-guide for the 5500-X:

http://www.cisco.com/en/US/partner/docs/security/ips/7.1/configuration/guide/cli/cliguide71.html

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni