Service Modules in 6500s, IPS/IDS and Stand-alone options.

[Alan_Chemist]

Hi,

My first post here and it's a question regarding knowledge that I can't seem to find via CCW and through people I know.

Does the Service Module in the 6500 i.e. WS-SVC-ASASM1B-K9 come with or support an IPS/IDS option?

Does a stand-alone ASA5500 come with an installed IPS/IDS option.

Thanks.

[Karsten Iwen]

> Does the Service Module in the 6500 i.e. WS-SVC-ASASM1B-K9 come with or support an IPS/IDS option?

On the Cat6k5 is the IDSM2. Thats a completely outdated module with 500 MBit/s of throuput. For the Datacenter designs Cisco recommends the standalone IPS 4500 instead a module if you need good IPS throughput.

> Does a stand-alone ASA5500 come with an installed IPS/IDS option.

The ASA has build-in IPS with a fixed signature-set that is not such rerlevant. The better way of doing IPS on the ASa is to have an optional IPS-module. These modules are didicated hardware on the legacy ASAs (the ones without -X) and pure software-modules on the new ASAs. The 5585 is an exception where IPS is also a dedicated hardware-module.


Sent from Cisco Technical Support iPad App