Cisco ASA 5540

Chapter 13 Configuring the AIP SSM
What to Do Next
13-14
Cisco ASA 5500 Series Getting Started Guide
78-19186-01
hostname(config)# access-list my-ips-acl2 permit ip any 10.2.1.0
255.255.255.0
hostname(config)# class-map my-ips-class
hostname(config-cmap)# match access-list my-ips-acl
hostname(config)# class-map my-ips-class2
hostname(config-cmap)# match access-list my-ips-acl2
hostname(config-cmap)# policy-map my-ips-policy
hostname(config-pmap)# class my-ips-class
hostname(config-pmap-c)# ips inline fail-open sensor sensor1
hostname(config-pmap)# class my-ips-class2
hostname(config-pmap-c)# ips inline fail-open sensor sensor2
hostname(config-pmap-c)# service-policy my-ips-policy interface
outside
What to Do Next
You are now ready to configure the adaptive security appliance for intrusion
prevention. Use the following documents to continue configuring the adaptive
security appliance for your implementation.
To Do This ... See ...
Configure the IPS sensor Configuring the Cisco Intrusion
Prevention System Sensor Using the
Command Line Interface
Optimize performance for the AIP
SSM and CSC SSM by creating more
efficient service policies
Cisco ASA 5500 Series Configuration
Guide using the CLI