Cisco ASA 5506-X Configuration Manual page 421

Chapter 18 ASA IPS Module
hostname(config)# class-map my-ips-class
hostname(config-cmap)# match access-list my-ips-acl
hostname(config)# class-map my-ips-class2
hostname(config-cmap)# match access-list my-ips-acl2
hostname(config-cmap)# policy-map my-ips-policy
hostname(config-pmap)# class my-ips-class
hostname(config-pmap-c)# ips inline fail-open sensor sensor1
hostname(config-pmap)# class my-ips-class2
hostname(config-pmap-c)# ips inline fail-open sensor sensor2
hostname(config-pmap-c)# service-policy my-ips-policy interface outside
Feature History for the ASA IPS module
Table 18-2
Table 18-2 Feature History for the ASA IPS module
Feature Name
AIP SSM
Virtual sensors (ASA 5510 and higher)
AIP SSC for the ASA 5505
Support for the ASA IPS SSP-10, -20, -40, and -60 for
the ASA 5585-X
lists each feature change and the platform release in which it was implemented.
Platform
Releases
7.0(1)
8.0(2)
8.2(1)
8.2(5)/
8.4(2)
Feature History for the ASA IPS module
Feature Information
We introduced support for the AIP SSM for the ASA 5510,
5520, and 5540.
The following command was introduced: ips.
Virtual sensor support was introduced. Virtual sensors let
you configure multiple security policies on the ASA IPS
module.
The following command was introduced: allocate-ips.
We introduced support for the AIP SSC for the ASA 5505.
The following commands were introduced:
allow-ssc-mgmt, hw-module module ip, and hw-module
module allow-ip.
We introduced support for the ASA IPS SSP-10, -20, -40,
and -60 for the ASA 5585-X. You can only install the ASA
IPS SSP with a matching-level SSP; for example, SSP-10
and ASA IPS SSP-10.
The ASA 5585-X is not supported in Version 8.3.
Note
Cisco ASA Series Firewall CLI Configuration Guide
18-23