What To Do Next - Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Manual

What to Do Next

What to Do Next
Cisco ASA 5500 Series Getting Started Guide
13-14
hostname(config)# access-list my-ips-acl2 permit ip any 10.2.1.0
255.255.255.0
hostname(config)# class-map my-ips-class
hostname(config-cmap)# match access-list my-ips-acl
hostname(config)# class-map my-ips-class2
hostname(config-cmap)# match access-list my-ips-acl2
hostname(config-cmap)# policy-map my-ips-policy
hostname(config-pmap)# class my-ips-class
hostname(config-pmap-c)# ips inline fail-open sensor sensor1
hostname(config-pmap)# class my-ips-class2
hostname(config-pmap-c)# ips inline fail-open sensor sensor2
hostname(config-pmap-c)# service-policy my-ips-policy interface
outside
You are now ready to configure the adaptive security appliance for intrusion
prevention. Use the following documents to continue configuring the adaptive
security appliance for your implementation.
To Do This ...
Configure the IPS sensor
Optimize performance for the AIP
SSM and CSC SSM by creating more
efficient service policies
Chapter 13 Configuring the AIP SSM
See ...
Configuring the Cisco Intrusion
Prevention System Sensor Using the
Command Line Interface
Cisco ASA 5500 Series Configuration
Guide using the CLI
78-19186-01