Cisco Asdm 7 User Guide

 
31-17
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
What to Do Next
For the ASA in multiple context mode, see the “Assigning Virtual Sensors to a Security Context 
(ASA 5510 and Higher)” section on page 31-17.
For the ASA in single context mode, see the “Diverting Traffic to the ASA IPS module” section on 
page 31-18.
Assigning Virtual Sensors to a Security Context (ASA 5510 and Higher)
If the ASA is in multiple...

 
31-18
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Configuring the ASA IPS module
If you do not specify a sensor name when you configure IPS within the context configuration, the context 
uses this default sensor. You can only configure one default sensor per context. If you do not specify a 
sensor as the default, and the context configuration does not include a sensor name, then traffic uses the 
default sensor on the ASA IPS module.
Step...

 
31-19
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Managing the ASA IPS module
Step 3Complete the Service Policy dialog box as desired. See the ASDM online help for more information 
about these screens.
Step 4Click Next. The Add Service Policy Rule Wizard - Traffic Classification Criteria dialog box appears.
Step 5Complete the Traffic Classification Criteria dialog box as desired. See the ASDM online help for more 
information about these...

 
31-20
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Managing the ASA IPS module
This section includes procedures that help you recover or troubleshoot the module and includes the 
following topics:
Installing and Booting an Image on the Module, page 31-20
Shutting Down the Module, page 31-22
Uninstalling a Software Module Image, page 31-22
Resetting the Password, page 31-23
Reloading or Resetting the Module, page 31-24
Installing and Booting an...

 
31-21
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Managing the ASA IPS module
Detailed Steps
Command Purpose
Step 1For a hardware module (for example, the ASA 
5585-X):
hw-module module 1 recover configure
For a software module (for example, the ASA 
5545-X):
sw-module module ips recover configure 
image disk0:file_path
Example:
ciscoasa# hw-module module 1 recover 
configure
Image URL [tftp://127.0.0.1/myimage]: 
tftp://10.1.1.1/ids-newimg
Port...

 
31-22
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Managing the ASA IPS module
Shutting Down the Module
Shutting down the module software prepares the module to be safely powered off without losing 
configuration data. Note: If you reload the ASA, the module is not automatically shut down, so we 
recommend shutting down the module before reloading the ASA. To gracefully shut down the module, 
perform the following steps at the ASA CLI.
Detailed...

 
31-23
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Managing the ASA IPS module
Resetting the Password
You can reset the module password to the default. For the user cisco, the default password is cisco. After 
resetting the password, you should change it to a unique value using the module application.
Resetting the module password causes the module to reboot. Services are not available while the module 
is rebooting.
If you cannot connect to ASDM...

 
31-24
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Monitoring the ASA IPS module
Reloading or Resetting the Module
To reload or reset the module, enter one of the following commands at the ASA CLI.
Detailed Steps
Monitoring the ASA IPS module
See the “Intrusion Prevention Tab” section on page 4-28 in the general operations configuration guide. Command Purpose
For a hardware module (for example, the ASA 
5585-X):
hw-module module 1 reload
For a...

 
31-25
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Feature History for the ASA IPS module
Feature History for the ASA IPS module
Table 31-2 lists each feature change and the platform release in which it was implemented. ASDM is 
backwards-compatible with multiple platform releases, so the specific ASDM release in which support 
was added is not listed.
Table 31-2 Feature History for the ASA IPS module
Feature NamePlatform 
Releases Feature...

 
31-26
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 31      Configuring the ASA IPS Module
  Feature History for the ASA IPS module