05-27-2014 12:04 AM - edited 03-10-2019 06:12 AM
Hello,
I have ASA with IPS module.
License Status: No Licence
Well, I wanna analyze all interface on ASA but I just see 1 port (port-channel0/0) on IDM.
IDM screenshot at attachment
Why ? Could anyone comment this situation ?
Regards,
05-27-2014 10:33 AM
You cannot monitor ASA interfaces using IDM. You need ASDM. ASDM has a tab for IPS', too. You'll be able to monitor your entire unit with it.
Also, if you have multiple virtual sensors with a software IPS or an IPS SSM, they'll all be grouped under PortChannel0/0. It's the only available physical interface.
05-28-2014 01:47 AM
05-28-2014 06:24 AM
I can not monitor both inside and outside of a firewall or NAT device. Because IPS's interface status null! just there is port-channel and management ports others like gigabit0/3-gigabit/04 no there is why?
05-28-2014 08:16 AM
That's correct. In any IPS management software, ASDM or IDM, you can only view the IPS interfaces. If you want to monitor the firewall interfaces, you have to do it in the "Device" tab of ASDM. Although embedded in the ASA, the IPS acts as a separate entity altogether. Physically, it's part of the ASA chassis, logically it is its own separate device.
05-28-2014 10:26 PM
05-28-2014 08:17 AM
Do you have a software, hardware module, or IPS appliance?
05-28-2014 10:17 PM
I have a software IPS on Asa 5545
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide