Hi All,I have two ASA 5520 version 8.2 in active Standay Mode.What is a good practice to setup IPS AIM ssm-20 for this setup.Is IPS should be in Fail-Open or Fail-Close mode ?Is Mangement ip for both IPS module should be same or diffrent. ?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,637) -
Cisco Bugs
(61) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(150) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(48) -
Cisco Secure Firewall Management Center (FMC)
(255) -
Cisco Secure Firewall Threat Defense (FTD)
(308) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(265) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,581) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(325) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(94) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,792) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(645) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
I'm new to the Networking world and am trying to establish a base for my network. I'm running ASA 5510 8.4(4), how can I measrue throughput ?In the ASDM, there is a nice feature for CPU, and the command show CLI also provides good info about CPU, but...
Please forgive me in advance for being such an idiot, but for the life of me, I can't figure out why my second network cannot access the ASA or anything outside of it. If my outside interface is 55.242.141.20, and my internal is 192.168.1.0, everythi...
Resolved! implementing pat
I have a little bit of confusion on implementing global address pools and PAT. I want to do a many to one translation. I have a FWSM that has a /24 network bound to an interface for guest wireless. All I want to do is use private IP addressess and...
I am trying to put back a NAT configuraton that I already had configured at one point, but had to delete.This was how it was configured before deletion:Object network obj-198.100.100.12 Nat (inside,outside) static 206.248.224.18I have tried to put ...
Resolved! NAT syntax - upgrading to 8.3+
Looking at the changes in NAT syntax after the upgrade.... how would I do the following in 8.3+?1)access-list Encrypt extended permit ip 172.10.35.0 255.255.255.0 172.10.18.0 255.255.255.0 access-list Encrypt extended permit ip 172.10.36.0 255.255.25...
Resolved! ASA5510 - LACP in Transparent Mode
Hello all,I understand that in transparent mode an ASA5510 would only be able to have two interfaces, inside and outside.My question is could one of those logical interfaces be an LACP'd interface, made up of two physical interfaces. Topology below.I...
Resolved! Configure DMZ on an ASA 5510
Good Morning All,I am confiuging a DMZ on my ASA 5510 but I have run out of physical ports, since I have dual Wan ports configured. I plan to implement a DMZ using subinterfaces. I have 2 questions:1) Do I need to configure a Vlan to complete this ...
Resolved! ASA 5510 cannot ping via route inside
Hey Folks,I would appreciate any feedback I can get on this. I recently added a business cable modem to help relieve some of the conjestion I was getting on my T1 for our MPLS network. There was an ASA 5510 collecting dust in a closet here and I th...
It you are using the ASA as a DHCP server, can you hold each specific ip address that the ASA gives out by the end components mac address?
I have cisco pix 520 Firewall and I forgot my firewall password but now I want to reset so I have to get into monitor mode but when I press escape key my firewall is not get into monitor mode. so now how can I get into monitor mode or Are there any O...
I have DMZ n/w 192.166.0.0/24on which i have nated on public ipprivate ip : 192.16.0.201 (OWA)public ip : 61.x.x.x.when i try to access owa(public ip ) from dmz it is not allowing , Fromwhat rules i need to set to get work ASA 5510 8.2
Resolved! ASA Implicit Deny
HiIm new to the ASA firewall. With no ACL's configured Im trying to ping from a host in the inside to a host on the outside. Pinging from a level 100 to a level 0. This is permitted and I realize that I would have to create an ACL to permit icmp pin...
Resolved! asa 5510 port e0/3 not showing
Has anyone experienced this I was enabling all the ports for testing on an asa 5510 and once I got to port e0/3 I got this error:ciscoasa(config-if)# int e0/0ciscoasa(config-if)# no shutciscoasa(config-if)# int e0/1ciscoasa(config-if)# no shutciscoas...
Hi All,Hope you are doing good. I am currently trying to configure PAT on our FWSM. There are a large number of hosts(four private /24 subnets) that need to be patted and they are ending up using all the ports that can be PATted via one ip address. T...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM | ||
| 06-24-2026 08:00 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
