CHAPTER
1-1
Cisco ASA Series CLI Configuration Guide
1
Configuring the ASA IPS Module
This chapter describes how to configure the ASA IPS module. The ASA IPS module might be a physical
module or a software module, depending on your ASA model. For a list of supported ASA IPS modules
per ASA model, see the Cisco ASA Compatibility Matrix:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
This chapter includes the following sections:
• Information About the ASA IPS module, page 1-1
• Licensing Requirements for the ASA IPS module, page 1-5
• Guidelines and Limitations, page 1-5
• Default Settings, page 1-6
• Configuring the ASA IPS module, page 1-7
• Managing the ASA IPS module, page 1-21
• Monitoring the ASA IPS module, page 1-25
• Configuration Examples for the ASA IPS module, page 1-26
• Feature History for the ASA IPS module, page 1-26
Information About the ASA IPS module
The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion
prevention services to stop malicious traffic, including worms and network viruses, before they can
affect your network. This section includes the following topics:
• How the ASA IPS module Works with the ASA, page 1-2
• Operating Modes, page 1-3
• Using Virtual Sensors (ASA 5510 and Higher), page 1-3
• Information About Management Access, page 1-4