asa-ips virtual sensor physical interface

[Anatoly Fanrus]

Hello,

help me pls, i dont understand what a intherface i need to use when configuring physical interface for virtual sensor on ASA 5512-X IPS SSP

Should it be a outside interface or inside or it sould be backplane interface.

Must i configure it or it is optional?

Thanks in advance

[JonPBerbee]

Hi Anatoly,

You need to assign PortChannel0/0 to the virtual sensor for your IPS to inspect traffic, just looked at a 5512 we manage and confirmed it.

If you launch the IDM and go to Configuration\Policies you can click on vs0, select Edit, and you should see the interface options available to assign to the virtual sensor and you should only see PortChannel0/0 there to assign.

Jon.

[Ravi Singh]

You have to assign your physical interface to VS0(i.e Virtual Sensor of IPS) and rest depends on your configuration policy.

[bbiandov]