18-7
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter18 Configuring the ASA 5500-X IPS SSP
Creating Virtual Sensors for the ASA 5500-X IPS SSP
Assigning Virtual Sensors to Adaptive Security Appliance Contexts
After you create virtual sensors on the ASA 5500-X IPS SSP, you must assign the virtual sensors to a
security context on the adaptive security appliance.
The following options apply:
•
[no] allocate-ips sensor_name [mapped_name] [defau lt]—Allocates a virtual sensor to a security
context. Supported modes are multiple mode, system context, and context submode.
Note
You cannot allocate the same virtual sensor twice in a context.
–
sensor_name—Specifies the name of the virtual sensor configured on the
ASA 5500-X IPS SSP. You receive a warning message if the name is not valid.
–
mapped_name—Specifies the name by which the security context knows the virtual sensor.
Note
The mapped name is used to hide the real name of the virtual sensor from the context,
usually done for reasons of security or convenience to make the context configuration
more generic. If no mapped name is used, the rea l virtual sensor name is used. You
cannot reuse a mapped name for two different virtual sensors in a context.
–
no—De-allocates the sensor, looks through the policy map configurations, and deletes any IPS
subcommand that refers to it.
–
default—Specifies this virtual sensor as the default. All legacy IPS configurations that do not
specify a virtual sensor are mapped to this virtual sensor.
Caution
You can only configure one default virtual sensor per context. You must turn off the default flag of an
existing default virtual sensor before you can designate another virtual sensor as the default.
–
clear configure allocate-ips—Removes the configuration.
–
allocate-ips?—Displays the list of configured virtual sensors.
•
show context [detail]—Updated to display information about virtual sensors. In user context mode,
a new line is added to show the mapped names of all virtual sensors that have been allocated to this
context. In system mode, two new lines are added to show the real and mapped names of virtual
sensors allocated to this context.
You can assign multiple virtual sensors to a context. Multiple contexts can share one virtual sensor, and
when sharing, the contexts can have different mapped names (aliases) for the same virtual se nsor. The
following procedure demonstrates how to add three security contexts in multiple mode and how to assign
virtual sensors to these security contexts.
Assigning Virtual Sensors to Contexts
To assign virtual sensors to adaptive security appliance contexts in multiple mode for the
ASA 5500-X IPS SSP, follow these steps:
Step 1
Log in to the adaptive security appliance.
Step 2
Display the list of available virtual sensors.
asa# show ips