Configuring the ASA IPS module is a process that includes configuration of the IPS security policy on
the ASA IPS module and then configuration of the ASA to send traffic to the ASA IPS module. To
configure the ASA IPS module, perform the following steps:

Step 1

Cable the ASA and IPS management interfaces. See the

“Connecting Management Interface Cables”

section on page 58-7

Step 2

Depending on your ASA model:

•

(ASA 5510 and higher) Configure basic network settings for the IPS module. See the

“(ASA 5510

and Higher) Configuring Basic Network Settings” section on page 58-10

•

(ASA 5505) Configure the management VLAN and IP address for the IPS module. See the

“(ASA

5505) Configuring Basic Network Settings” section on page 58-11

Step 3

(ASA 5512-X through ASA 5555-X; may be required) Install the software module. See the

“(ASA

5512-X through ASA 5555-X) Installing the Software Module” section on page 58-14

Step 4

On the module, configure the inspection and protection policy, which determines how to inspect traffic
and what to do when an intrusion is detected. See the

“Configuring the Security Policy on the ASA IPS

module” section on page 58-14

Step 5

(ASA 5510 and higher, optional) On the ASA in multiple context mode, specify which IPS virtual
sensors are available for each context (if you configured virtual sensors). See the

“Assigning Virtual

Sensors to a Security Context (ASA 5510 and Higher)” section on page 58-15

Step 6

On the ASA, identify traffic to divert to the ASA IPS module. See the

“Diverting Traffic to the ASA IPS

module” section on page 58-17

Connecting Management Interface Cables

Connect the management PC to the ASA management interface and the ASA IPS module management
interface.

Guidelines

•

Your cabling might differ depending on your network.

•