Configuring the AIP SSM
Configuring the AIP SSM
AIP SSM Procedure Overview
Sessioning to the AIP SSM
Cisco ASA 5500 Series Getting Started Guide
13-6
This section includes the following topics:
•
AIP SSM Procedure Overview, page 13-6
Sessioning to the AIP SSM, page 13-6
•
Configuring the Security Policy on the AIP SSM, page 13-8
•
Assigning Virtual Sensors to Security Contexts, page 13-9
•
Diverting Traffic to the AIP SSM, page 13-11
•
Configuring the AIP SSM is a process that includes configuration of the AIP SSM
and then configuration of the ASA 5500 series adaptive security appliance:
Session to the AIP SSM from the adaptive security appliance. See the
1.
"Sessioning to the AIP SSM" section on page
On the AIP SSM, configure the inspection and protection policy, which
2.
determines how to inspect traffic and what to do when an intrusion is
detected. Configure the inspection and protection policy for each virtual
sensor if you want to run the AIP SSM in multiple sensor mode. See the
"Configuring the Security Policy on the AIP SSM" section on page
On the ASA 5500 series adaptive security appliance in multiple context
3.
mode, specify which IPS virtual sensors are available for each context (if you
configured virtual sensors). See the
Contexts" section on page
On the ASA 5500 series adaptive security appliance, identify traffic to divert
4.
to the AIP SSM. See the
page
13-11.
To begin configuring the AIP SSM, session to the AIP SSM from the adaptive
adaptive security appliance. (You can alternatively connect directly to the AIP
SSM management interface using SSH or Telnet.)
Chapter 13
13-6.
"Assigning Virtual Sensors to Security
13-9.
"Diverting Traffic to the AIP SSM" section on
Configuring the AIP SSM
13-8.
78-19186-01