Cisco Systems Configuring the ASA IPS Module

CHAPTE R
31-1
Cisco ASA Series Firewall CLI Configuration Guide
31
Configuring the ASA IPS Module
This chapter describes how to configure the ASA IPS module. The ASA IPS module might be a hardware
module or a software module, depending on your ASA model. For a list of supported ASA IPS modules
per ASA model, see the Cisco ASA Compatibility Matrix:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
This chapter includes the following sections:
•Information About the ASA IPS Module, page 31-1
•Licensing Requirements for the ASA IPS module, page31-5
•Guidelines and Limitations, page31-5
•Default Settings, page31-6
•Configuring the ASA IPS module, page31-7
•Managing the ASA IPS module, page31-21
•Monitoring the ASA IPS module, page31-25
•Configuration Examples for the ASA IPS module, page31-26
•Feature History for the ASA IPS module, page31-27
Information About the ASA IPS Module
The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion
prevention services to stop malicious traffic, including worms and network viruses, before they can
affect your network. This section includes the following topics:
•How the ASA IPS Module Works with the ASA, page31-2
•Operating Modes, page 31-3
•Using Virtual Sensors (ASA 5510 and Higher), page31-3
•Information About Management Access, page31-4