Configuring The Security Policy On The Aip Ssm; Assigning Virtual Sensors To Security Contexts - Cisco PIX 500 Series Configuration Manual

Managing the AIP SSM

Configuring the Security Policy on the AIP SSM

On the AIP SSM, to configure the inspection and protection policy, which determines how to inspect
traffic and what to do when an intrusion is detected, perform the following steps. To session from the
security appliance to the AIP SSM, see the
To run the setup utility for initial configuration of the AIP SSM, enter the following command:
Step 1
sensor# setup
Configure the IPS security policy. If you configure virtual sensors in IPS Version 6.0 or above, you
Step 2
identify one of the sensors as the default. If the ASA 5500 series adaptive security appliance does not
specify a virtual sensor name in its configuration, the default sensor is used.
Because the IPS software that runs on the AIP SSM is beyond the scope of this document, detailed
configuration information is available in the following documents:
•
•
When you are done configuring the AIP SSM, exit the IPS software by entering the following command:
Step 3
sensor# exit
If you sessioned to the AIP SSM from the security appliance, you return to the security appliance
prompt.

Assigning Virtual Sensors to Security Contexts

If the security appliance is in multiple context mode, then you can assign one or more IPS virtual sensors
to each context. Then, when you configure the context to send traffic to the AIP SSM, you can specify
a sensor that is assigned to the context; you cannot specify a sensor that you did not assign to the context.
If you do not assign any sensors to a context, then the default sensor configured on the AIP SSM is used.
You can assign the same sensor to multiple contexts.
Note You do not need to be in multiple context mode to use virtual sensors; you can be in single mode and use
different sensors for different traffic flows.
To assign one or more sensors to a security context, perform the following steps:
To enter context configuration mode, enter the following command in the system execution space:
Step 1
hostname(config)# context name
hostname(config-ctx)#
For more information about configuring contexts, see the
page
To assign a virtual sensor to the context, enter the following command:
Step 2
hostname(config-ctx)# allocate-ips sensor_name [ mapped_name ] [default]
Enter this command for each sensor you want to assign to the context.
Cisco Security Appliance Command Line Configuration Guide
22-6
Configuring the Cisco Intrusion Prevention System Sensor Using the Command Line Interface
Command Reference for Cisco Intrusion Prevention System
6-7.
Chapter 22
"Sessioning to the AIP SSM" section on page
"Configuring a Security Context" section on
Managing the AIP SSM and CSC SSM
22-5.
OL-12172-03