Configuring the security policy on the asa ips, And then re – Cisco ASA 5505 User Manual
Page 1234
58-14
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 58 Configuring the ASA IPS Module
Configuring the ASA IPS module
(ASA 5512-X through ASA 5555-X) Installing the Software Module
Your ASA typically ships with IPS module software present on Disk0. If the module is not running,
however, you need to install the module.
Detailed Steps
Step 1
To view the IPS module software filename in flash memory, enter:.
hostname# dir disk0:
For example, look for a filename like IPS-SSP_5512-K9-sys-1.1-a-7.1-4-E4.aip. Note the filename; you
will need this filename later in the procedure.
Step 2
If you need to copy a new image to disk0, download the image from Cisco.com to a TFTP server, and
then enter:
hostname# copy tftp://server/file_path disk0:/file_path
For other server types, see the
“Downloading a File to a Specific Location” section on page 81-3
Step 3
To identify the IPS module software location in disk0, enter the following command:
hostname# sw-module module ips recover configure image disk0:file_path
For example, using the filename in the example in Step 1, enter:
hostname# sw-module module ips recover configure image
disk0:IPS-SSP_5512-K9-sys-1.1-a-7.1-4-E4.aip
Step 4
To install and load the IPS module software, enter the following command:
hostname# sw-module module ips recover boot
Step 5
To check the progress of the image transfer and module restart process, enter the following command:
hostname# show module ips details
The Status field in the output indicates the operational status of the module. A module operating
normally shows a status of “Up.” While the ASA transfers an application image to the module, the Status
field in the output reads “Recover.” When the ASA completes the image transfer and restarts the module,
the newly transferred image is running.
Configuring the Security Policy on the ASA IPS module
This section describes how to configure the ASA IPS module application.
Detailed Steps
Step 1
Access the ASA IPS module CLI using one of the following methods:
•
Session from the ASA to the ASA IPS module. See the