IDS on ASA5505 / ASA5510

[Hans Juergen Guenter]

Hi,

how do I configure IDS on a ASA5505/5510? Can these two ASA ever IDS

without an additional module?

Where can I find a manual oder book for the configuration of IDS on a ASA5505/5510?

I`m not looking for the IPS, because I know that I need for the IPS an AIP-SSM Module.

Please I need the help, because I want to configure an IDS System on a ASA5505/5510.

Sincirley Yours

H.-J. Guenter

[Karsten Iwen]

Yes, you can configure IDS on the ASA without the IPS-module. But the capabilities are quite outdated and in most situations not worth the effort (IMHO). Here is some more information on that feature:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/protect_tools.html#wp1056358

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Hans Juergen Guenter]

Thanks for the fast answer.

I see that it comes from the ASA84, do that also run under ASA72? or do I need to see how do IDS under ASA72?

[Karsten Iwen]

I assumed that you run the latest version as you didn't mention any version ...

The ASA/PIX-IDS functionality was not changed in the last 2000 years (or so). So it's also included in the 7.2 config-guide:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/protect.html#wp1056358

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni