IPS Sensors passing Multicast traffic

[rhermes]

Do the ASA/AIP-SSM modules pass Multicast traffic when configured in the In-Line mode?

- Bob

[Nicolas Fournier · Accepted solution]

Hi Bob,

The AIP-SSM is acting as a  L2 Bridge when used in Inline mode so it should pass Multicast traffic just fine.

I did a bit of research and unfortunately there is a bug which I believe would prevent this to work:

CSCtb82257  Sending multicast to AIP-SSM module sets dmac to 0000.0000.0000

Since it is not fixed yet, I would advise you to have the Multicast traffic bypass the AIP-SSM and only send Unicast traffic to it.

Regards,

Nicolas