ASA 5505 IDS Promiscuous setup

[Brunhuber Adrian]

Hi , i need the comunity help in this matter.

I ordered a IPS module to a small ASA to replace a Snort IDS Server.
I want only to perform IDS and reporting (not inline)

The design (simplified) is

The problem is that i read this morning that ASA cannot handle this type of scenario, it can only analyse the traffic that is passing through it.

Is there a chance to make this work ?

Thanks.

[Adrian Aron]

Hello Adrian,

Please have a look in a guide how to configure SSM in promiscuous mode, it should work as you expect.

http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/cli/cli_ssm.html

thanks