Reset Password of IPS module (ASA)

[anitachoi3]

Dear Expert,

I have ASA 5500 series with AIP SSM (IPS module), the login name and password are lost. According to the cisco portal, there are two approach to recover the password:

1. using CLI command: hw-module module slot_number password-reset;

2. using ASDM --> tools --> "IPS password reset"

I am not sure both commands to achieve the same result (recover password) or they may have different outcome (i.e. need to reset the module).

The device is on line, reset module is not prefered. 

After checking some infomation from internet, it suggests to reste the IPS module. Any problem will be occurred if the IPS module is not reset after password recovery?

rgds

Anita

[Vibhor Amrodia]

Hi Anita,

I would recommend recovering the password on the IPS module first without resetting it.

http://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_asa_ips.html#wp1034193

Also , if is a Fail-over Pair , you can check this Heading for more information on how to reset the password without any impact to the production traffic:-

ASA 5500-X IPS SSP Failover Scenarios

Thanks and Regards,

Vibhor Amrodia