Cisco ASA 5512-X Cli Configuration Guide

1-8
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA IPS Module
Configuring the ASA IPS module
Connecting the ASA IPS Management Interface
In addition to providing management access to the IPS module, the IPS management interface needs
access to an HTTP proxy server or a DNS server and the Internet so it can download global correlation,
signature updates, and license requests. This section describes recommended network configurations.
Your network may differ.
• ASA 5510, ASA 5520, ASA 5540, ASA 5580, ASA 5585-X (Physical Module), page 1-8
• ASA 5512-X through ASA 5555-X (Software Module), page 1-9
• ASA 5505, page 1-10
ASA 5510, ASA 5520, ASA 5540, ASA 5580, ASA 5585-X (Physical Module)
The IPS module includes a separate management interface from the ASA.
If you have an inside router
If you have an inside router, you can route between the management network, which can include both
the ASA Management 0/0 and IPS Management 1/0 interfaces, and the ASA inside network. Be sure to
also add a route on the ASA to reach the Management network through the inside router.
ASA 5585-X
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1
SFP0
101234567
MGMT
0
1
AUX CON SOLE
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1
SFP0
101234567
MGMT
0
1
AUX CON SOLE
ASA Management 0/0
Default IP: 192.168.1.1
IPS Management 1/0
Default IP: 192.168.1.2
SSP
IPS SSP
334656
ASA Management 0/0
Internet
Management PC
Proxy or DNS Server (for example)
Router
ASA
IPS Management 1/0
Outside
IPS
Management
Inside
IPS Default
Gateway
ASA gateway for Management
334658

Cisco ASA 5512-X Specifications

General

Brand	Cisco
Model	ASA 5512-X
Category	Firewall
Language	English