Cisco Systems ASA 5500 manual Managing the AIP SSM, About the AIP SSM, •Checking SSM Status, page

C H A P T E R 19

Managing the AIP SSM and CSC SSM

The Cisco ASA 5500 series adaptive security appliance supports a variety of SSMs. This chapter describes how to configure the adaptive security appliance to support an AIP SSM or a CSC SSM, including how to send traffic to these SSMs.

For information about the 4GE SSM for the ASA 5000 series adaptive security appliance, see Chapter 4, “Configuring Ethernet Settings and Subinterfaces”.

Note The Cisco PIX 500 series security appliances does not support SSMs.

This chapter includes the following sections:

•Managing the AIP SSM, page 19-1

•Managing the CSC SSM, page 19-5

•Checking SSM Status, page 19-13

•Transferring an Image onto an SSM, page 19-14

Managing the AIP SSM

This section contains the following topics:

•About the AIP SSM, page 19-1

•Getting Started with the AIP SSM, page 19-2

•Diverting Traffic to the AIP SSM, page 19-2

•Sessioning to the AIP SSM and Running Setup, page 19-4

About the AIP SSM

The ASA 5500 series adaptive security appliance supports the AIP SSM, which runs advanced

IPS software that provides further security inspection. The adaptive security appliance diverts packets to the AIP SSM just before the packet exits the egress interface (or before VPN encryption occurs, if configured) and after other firewall policies are applied. For example, packets that are blocked by an access list are not forwarded to the AIP SSM.

Cisco Security Appliance Command Line Configuration Guide

OL-8629-01 19-1