Verifying Aip-Ssm Initialization; Sending Traffic To Aip-Ssm; Overview; Chapter 14 Configuring Aip-Ssm - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Verifying AIP-SSM Initialization

8.
9.
Verifying AIP-SSM Initialization
You can use the show module slot details command to verify that you have initialized AIP-SSM and to
verify that you have the correct software version.
To verify initialization, follow these steps:
Log in to ASA.
Step 1
Obtain the details about AIP-SSM:
Step 2
hostname# show module 1 details
Getting details from the Service Module, please wait...
ASA 5500 Series Security Services Module-20
Model:
Hardware version:
Serial Number:
Firmware version:
Software version:
Status:
Mgmt IP addr:
Mgmt web ports:
Mgmt TLS enabled:
hostname#
Confirm the information. If you need to change anything, for the tasks you need to perform to update
Step 3
AIP-SSM settings, see

Sending Traffic to AIP-SSM

This section describes how to configure AIP-SSM to receive IPS traffic from ASA (inline or
promiscuous mode), and contains the following sections:
•
•

Overview

ASA diverts packets to AIP-SSM just before the packet exits the egress interface (or before VPN
encryption occurs, if configured) and after other firewall policies are applied. For example, packets that
are blocked by an access list are not forwarded to AIP-SSM.
You can configure AIP-SSM to inspect traffic in inline or promiscuous mode and in fail-open or fail-over
mode.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
14-2
Upgrade the IPS software with new signature updates and service packs.
For more information, see
Reimage AIP-SSM when needed.
For the procedure, see Installing the AIP-SSM System Image, page
AIP-SSM-20
0.2
P2B000005D0
1.0(10)0
5.0(0.27)S129.0
Up
10.89.149.219
881
false
Configuration Sequence, page
Overview, page 14-2
Configuring ASA to Send IPS Traffic to AIP-SSM, page 14-3
Obtaining Cisco IPS Software, page
14-1.
Chapter 14 Configuring AIP-SSM
18-1.
17-36.
78-16527-01