how to use Cisco ASA5510 as an IPS

[pwc_mexico]

We have a Cisco ASA5510 w

ith ASA-SSM-10 module but we´d like to know how to configure it as

an IPS. We have it in the same network but in a simulate enviroment 2 different network segments.

[Panos Kampanakis]

You need the ASA to pass traffic through the IPS as explained in http://supportforums.cisco.com/docs/DOC-5668

Note that since this is a different module you will need something like

access-list ips-acl extended permi ip any any 

class-map ips-class
 match access-list ips-acl

policy-map global_policy
 class ips-class
  ips fail-open

service-policy global_policy global

Then you can start configuring the ips following its config guide to fire on signatures etc.

I hope it helps.

PK