19-11
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter19 Configuring the ASA 5585-X IPS SSP
ASA 5585-X IPS SSP and Jumbo Packets
The SensorApp Fails
The following occurs when the SensorApp fails:
•
If the adaptive security appliance is configured for failover, then the adaptive security appliance fails
over.
•
If the adaptive security appliance is not configured for failover or failover is not possible:
–
If set to fail-open, the adaptive security appliance passes traffic without sending it to the
ASA IPS module.
–
If set to fail-close, the adaptive security appliance stops passing traffic until the ASAIPS
module is restarted.
The SensorApp is Reconfigured
The following occurs when the SensorApp is reconfigured:
•
If set to fail-open, the adaptive security appliance passes traffic without sending it to the ASA IPS
module.
•
If set to fail-close, the adaptive security appliance stops passing traffic until the ASAIPS module is
restarted.
Note
The adaptive security appliance does not failover unless the reconfiguration is not completed.

ASA 5585-X IPS SSP and Jumbo Packets

The jumbo packet count in the show interface command output from the lines
Total Jumbo Packets
Received
and
Total Jumbo Packets Transmitted
for ASA IPS modules may be larger than expected
due to some packets that were almost jumbo size on the wire being counted as jumbo size by the IPS.
This miscount is a result of header bytes added to the packet by the ASA before the packet is transmitted
to the IPS. For IPv4, 58 bytes of header data are added. For IPv6, 78 bytes of header data are ad ded. The
ASA removes the added IPS header before the packet leaves the ASA.

Reloading, Shutting Down, Resetting, and Recovering the

ASA 5585-X

IPS SSP

Note
You can enter the hw-module commands from privileged EXEC mode or from global configuration
mode. You can enter the commands in single routed mode and single transparent mode. For adaptive
security appliances operating in multi-mode (routed or transparent multi-mode) you can only execute the
hw-module commands from the system context (not from administrator or u ser contexts).