How to enable IDS and IPS in CSICO ASA firewall 5520

[praveennoc]

Can you please help us how can we configure the IDS/IPS in cisco asa firewall

[Karsten Iwen]

There are two IDS/IPS solutions for the ASA:

1) A build-in system with very limited functionality:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/protect_tools.html#wp1056358

The security-benefit of this system is quite small and is only counting minimally to your baseline-security. Don't expect to catch any real-world attack on your systems with that.

2) The ASA-IPS module. If you have this module here is the starting-point:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/modules_ips.html
http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/ime/imeguide71.html

If you have never worked with the Cisco-IPS before, then plan a couple of days to get famliliar with that software as it is quite complex to setup and maintain.


Sent from Cisco Technical Support iPad App