Cisco Systems Diverting Traffic to the ASA IPS module

31-18
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter31 Configuring the ASA IPS Module
Configuring the ASA IPS module
If you do not specify a sensor name when you configure IPS within the context configuration, the context
uses this default sensor. You can only configure one default sensor per context. If you do not specify a
sensor as the default, and the context configuration does not include a sensor name, then traffic uses the
default sensor on the ASA IPS module.
Step8 Repeat this procedure for each security context.
Step9 Change to each context to configure the IPS security policy as described in “Diverting Traffic to the ASA
IPS module” section on page31-18.
What to Do Next
Change to each context to configure the IPS security policy as described in “Diverting Traffic to the ASA
IPS module” section on page31-18.
Diverting Traffic to the ASA IPS module
This section identifies traffic to divert from the ASA to the ASA IPS module.
Prerequisites
In multiple context mode, perform these steps in each context execution space. To change to a context,
in the Configuration > Device List pane, double-click the context name under the active device IP
address.
Detailed Steps
Step1 Choose Configuration > Firewall > Service Policy Rules.
Step2 Choose Add > Add Service Policy Rule. The Add Service Policy Rule Wizard - Service Policy dialog
box appears.