Cisco Systems ASA 5580 Manual De Usuario

C H A P T E R

31-1

Cisco ASA Series Firewall CLI Configuration Guide

Configuring the ASA IPS Module

This chapter describes how to configure the ASA IPS module. The ASA IPS module might be a hardware
module or a software module, depending on your ASA model. For a list of supported ASA IPS modules
per ASA model, see the Cisco ASA Compatibility Matrix:

http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html

This chapter includes the following sections:

•

Information About the ASA IPS Module, page 31-1

•

Licensing Requirements for the ASA IPS module, page 31-5

•

Guidelines and Limitations, page 31-5

•

Default Settings, page 31-6

•

Configuring the ASA IPS module, page 31-7

•

Managing the ASA IPS module, page 31-21

•

Monitoring the ASA IPS module, page 31-25

•

Configuration Examples for the ASA IPS module, page 31-26

•

Feature History for the ASA IPS module, page 31-27

Information About the ASA IPS Module

The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion
prevention services to stop malicious traffic, including worms and network viruses, before they can
affect your network. This section includes the following topics:

•

How the ASA IPS Module Works with the ASA, page 31-2

•

Operating Modes, page 31-3

•

Using Virtual Sensors (ASA 5510 and Higher), page 31-3

•

Information About Management Access, page 31-4