IPS in Transparent Mode

[lcaruso]

Hi,

I need to know if the 5512X IPS will work if the ASA is in transparent mode and/or any limitations.

Thanks.

[Julio Carvajal]

Hello,

Yes, it can definetly run on transparent mode

An ASA in transparent mode can run an AIP.  In the event the AIP fails,

the IPS will fail-open and the ASA will continue to pass traffic.
However, if an interface or cable fails, then traffic will stop.  You
would need a failover pair to account for this failure event, which
means another ASA and matching AIP."

Regards,

Julio

[lcaruso]

Hi Julio,

I understand in Transparent Mode the ASA can only have one ip address on it. Does that include the IPS SSP as well?

Will I be able to setup the IPS to get its updates, global correlation, ntp and such if the ASA only has one ip address?

Will I be able to meet the requirements to manage the IPS with IME?

Thanks.

[Julio Carvajal · Accepted solution]

Hello Lcaruso,

Starting on ASA 8.4 on transparent mode you can have more than one Ip as you will be using Bridge-groups, also the managment interface will have it own dedicated Ip address.

The AIP-SSM will be fully fucntional whether you have it on transparent mode or not,

Regards,

Julio

[lcaruso]

So I can have bridge groups and assign an ip address to the management interface and setup the IPS just like a routed firewall? Guess I've got some reading to do.

[Julio Carvajal]

Hello Lcaruso,

Exactly you got it

Yeah but reading is not that bad when you know what you are looking for

Have a good one