CHAPTER
31-1
Cisco ASA Series Firewall ASDM Configuration Guide
31
Configuring the ASA IPS Module
This chapter describes how to configure the ASA IPS module. The ASA IPS module might be a hardware
module or a software module, depending on your ASA model. For a list of supported ASA IPS modules
per ASA model, see the Cisco ASA Compatibility Matrix:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
This chapter includes the following sections:
• Information About the ASA IPS Module, page 31-1
• Licensing Requirements for the ASA IPS module, page 31-5
• Guidelines and Limitations, page 31-5
• Default Settings, page 31-6
• Configuring the ASA IPS module, page 31-7
• Managing the ASA IPS module, page 31-19
• Monitoring the ASA IPS module, page 31-24
• Feature History for the ASA IPS module, page 31-25
Information About the ASA IPS Module
The ASA IPS module runs advanced IPS software that provides proactive, full-featured intrusion
prevention services to stop malicious traffic, including worms and network viruses, before they can
affect your network. This section includes the following topics:
• How the ASA IPS Module Works with the ASA, page 31-2
• Operating Modes, page 31-3
• Using Virtual Sensors (ASA 5510 and Higher), page 31-3
• Information About Management Access, page 31-4