IDS on Cisco ASA-AIP-SSM-10

[swapnil_choundkar]

Hi,

Can we install IDS on Cisco ASA- AIP-SSM-10 module?

Thanks.

[Karsten Iwen]

Yes, running IDS/IPS is what the AIP-SSM-modules are build for.

You find more information in the config-guide:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/modules_ips.html

BTW: This is the wrong forum. Better move the discussion to Security -> IPS.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[swapnil_choundkar]

Hi Karsten,

Thanks for the reply.

I know that we can install IPS on AIP-SSM-10, But i want to know about IDS and if yes how because I haven't found anything related to the IDS on AIP-SSM.

Thanks.

[Karsten Iwen]

IDS/IPS are only different operation-modes which both are available in the AIP. In the ASA-MPF you have to send the traffic to the module. There you tell the module to process the traffic promiscous (IDS) or inline (IPS).

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni