Cisco ASA 5505 - Manual (Page 1221)

C H A P T E R
58-1
Cisco ASA 5500 Series Configuration Guide using the CLI
58
Configuring the ASA IPS Module
This chapter describes how to configure the ASA IPS module. The ASA IPS module might be a physical
module or a software module, depending on your ASA model. For a list of supported ASA IPS modules
per ASA model, see the Cisco ASA Compatibility Matrix:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
This chapter includes the following sections:
• Information About the ASA IPS module, page 58-1
• Licensing Requirements for the ASA IPS module, page 58-5
• Guidelines and Limitations, page 58-5
• Default Settings, page 58-6
• Configuring the ASA IPS module, page 58-6
• Monitoring the ASA IPS module, page 58-20
• Troubleshooting the ASA IPS module, page 58-21
• Configuration Examples for the ASA IPS module, page 58-25
• Feature History for the ASA IPS module, page 58-25
Information About the ASA IPS module
The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion
prevention services to stop malicious traffic, including worms and network viruses, before they can
affect your network. This section includes the following topics:
• How the ASA IPS module Works with the ASA, page 58-2
• Operating Modes, page 58-2
• Using Virtual Sensors (ASA 5510 and Higher), page 58-3
• Information About Management Access, page 58-4