I'm new in IPS, please help.

[fatalXerror]

Hi Experts,

Good Day!

I have an ASA5585-X SSP IPS. Each module SSP and IPS has Ethernet ports, does those ports dedicated to the ASA and to the IPS or all of the ethernet ports are controlled by the ASA even though it is located in the IPS module?

Also, I'm going to tap another equipment into my IPS module, how can I configure a port in the IPS to act like just a tap mode or just to monitor all the traffic in that interface?

Thank you very much for the help.

Cheers,

niks

[Marvin Rhoads]

Please refer to the IPS Module Quick Start Guide for detailed info.

Generally speaking the IPS SSP management port is dedicated to the IPS. The Ethernet ports supplement the base ASA and are controlled by the ASA configuration.

The ASA IPS module isn't really designed to active as a passive IDS off of a tap. You can use it that way if the ASA is in transparent mode and the IPS policy set to monitor-only; but it would be a very unusual setup to have the high end 5585 with the optional IPS module configured that way.