Cisco ASA 5505 Configuration Manual page 1150

Configuring the AIP SSM/SSC
Change to each context to configure the IPS security policy as described in
Step 9
SSM/SSC" section on page
What to Do Next
Change to each context to configure the IPS security policy as described in
SSM/SSC" section on page
Diverting Traffic to the AIP SSM/SSC
This section identifies traffic to divert from the adaptive adaptive security appliance to the AIP
SSM/SSC.
Prerequisites
In multiple context mode, perform these steps in each context execution space.
Detailed Steps
In the ASDM Device List pane, double-click the context name under the active device IP address >
Step 1
Contexts.
Step 2 Click Configuration > Firewall > Service Policy Rules.
You can edit an existing rule or create a new one:
Step 3
•
•
Step 4 Click the Intrusion Prevention tab.
You can also set other feature actions for the same traffic using the other tabs.
Check the Enable IPS for this traffic flow check box.
Step 5
In the Mode area, click Inline Mode or Promiscuous Mode.
Step 6
See the
In the If IPS Card Fails area, click Permit traffic or Close traffic.
Step 7
The Close traffic option sets the adaptive security appliance to block all traffic if the AIP SSM/SSC is
unavailable.
The Permit traffic option sets the adaptive security appliance to allow all traffic through, uninspected, if
the AIP SSM/SSC is unavailable.
(AIP SSM Only) From the IPS Sensor to use drop-down list, choose a virtual sensor name.
Step 8
Cisco ASA 5500 Series Configuration Guide using ASDM
54-8
54-8.
54-8.
For an existing rule, choose the rule and click Edit.
The Edit Service Policy Rule dialog box appears.
For a new rule, choose Add > Add Service Policy Rule.
The Add Service Policy Rule Wizard - Service Policy dialog box appears. Complete the Service
Policy and Traffic Classification Criteria dialog boxes. See the
Through Traffic" section on page 29-8
Policy Rule Wizard - Rule Actions dialog box.
"Operating Modes" section on page 54-2
Chapter 54 Configuring the IPS Application on the AIP SSM and SSC
"Adding a Service Policy Rule for
for more information. Click Next to show the Add Service
for more details.
"Diverting Traffic to the AIP
"Diverting Traffic to the AIP
OL-20339-01