Cisco Asdm 7 User Guide

 
31-7
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
Configuring the ASA IPS module
This section describes how to configure the ASA IPS module and includes the following topics:
Task Flow for the ASA IPS Module, page 31-7
Connecting the ASA IPS Management Interface, page 31-8
Sessioning to the Module from the ASA (May Be Required), page 31-11
Configuring Basic IPS Module Network Settings, page 31-12
(ASA 5512-X through...

 
31-8
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
Connecting the ASA IPS Management Interface
In addition to providing management access to the IPS module, the IPS management interface needs 
access to an HTTP proxy server or a DNS server and the Internet so it can download global correlation, 
signature updates, and license requests. This section describes recommended network configurations. 
Your network may...

 
31-9
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
If you do not have an inside router
If you have only one inside network, then you cannot also have a separate management network, which 
would require an inside router to route between the networks. In this case, you can manage the ASA from 
the inside interface instead of the Management 0/0 interface. Because the IPS module is a separate device 
from the ASA, you...

 
31-10
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
If you do not have an inside router
If you have only one inside network, then you cannot also have a separate management network. In this 
case, you can manage the ASA from the inside interface instead of the Management 0/0 interface. If you 
remove the ASA-configured name from the Management 0/0 interface, you can still configure the IPS 
IP address for that...

 
31-11
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
Sessioning to the Module from the ASA (May Be Required)
To access the IPS module CLI from the ASA, you can session from the ASA. For software modules, you 
can either session to the module (using Telnet) or create a virtual console session. A console session 
might be useful if the control plane is down and you cannot establish a Telnet session.
You may need to...

 
31-12
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
(ASA 5512-X through ASA 5555-X) Booting the Software Module
Your ASA typically ships with IPS module software present on Disk0. If the module is not running, or 
if you are adding the IPS module to an existing ASA, you must boot the module software. If you are 
unsure if the module is running, you will not see the IPS Basic Configuration screen when you run the...

 
31-13
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
(ASA 5510 and Higher) Configuring Basic Network Settings
In single context mode, you can use the Startup Wizard in ASDM to configure basic IPS network 
configuration. These settings are saved to the IPS configuration, not the ASA configuration.
In multiple context mode, session to the module from the ASA and configure basic settings using the 
setup command....

 
31-14
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
Detailed Steps—Multiple Mode Using the CLI
(ASA 5505) Configuring Basic Network Settings
An ASA IPS module on the ASA 5505 does not have any external interfaces. You can configure a VLAN 
to allow access to an internal IPS management IP address over the backplane. By default, VLAN 1 is 
enabled for IPS management. You can only assign one VLAN as the management VLAN....

 
31-15
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
b.Enter the IPS management IP address. Make sure this address is on the same subnet as the ASA 
VLAN IP address. For example, if you assigned 10.1.1.1 to the VLAN for the ASA, then assign 
another address on that network, such as 10.1.1.2, for the IPS management address. By default, the 
address is 192.168.1.2
c.Choose the subnet mask from the drop-down list....

 
31-16
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
Step 3Enter the IP address, username and password that you set in the “Configuring Basic IPS Module Network 
Settings” section on page 31-12, as well as the port. The default IP address and port is 192.168.1.2:443. 
The default username and password is cisco and cisco.
If the password to access IDM is lost, you can reset the password using ASDM. See the “Resetting...