ASA's 510 with AIP-SSM AND CSC-SSM

[jjacobo]

I have to connect 2 ASA's 5510, one with the IPS module and the other with CSC module. Which is the best way and how do i configure both?

Internet-->ASA-IPS-->ASA-CSC-->LAN

Do somebody know a link with that scenario?

Thanks and regards.

[fauzyab.ahmed]

As per Experience you must follow the sequence as ASA-CSC and then to ASA-IPS the reason behind this flow is traffic coming from outside should be going in a that it passes from one interface to another to be monitored by sensor.. the other solution is to configure e-span for IPS to monitor the sensor traffic passing through ASA.

Another thing that can be done to this topology is to configure both the devices parallel to each other and pass trafic from CSC to IPS and things will be done.. I hope this will help

Regards,

Fauzyab

[jjacobo]

Fauzyab, thanks a lot for your comment, so, do you have any link or config sample to check the IP addressing of the ASA's, IPS and CSC?