Cisco ASA Series User Manual

1-19
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA IPS Module
Configuring the ASA IPS module
Detailed Steps
Command Purpose
Step 1
class-map name
Example:
hostname(config)# class-map ips_class
Creates a class map to identify the traffic for which you want to
send to the ASA IPS module.
If you want to send multiple traffic classes to the ASA IPS
module, you can create multiple class maps for use in the security
policy.
Step 2
match parameter
Example:
hostname(config-cmap)# match access-list
ips_traffic
Specifies the traffic in the class map. See the “Identifying Traffic
(Layer 3/4 Class Maps)” section on page 1-12 for more
information.
Step 3
policy-map name
Example:
hostname(config)# policy-map ips_policy
Adds or edits a policy map that sets the actions to take with the
class map traffic.
Step 4
class name
Example:
hostname(config-pmap)# class ips_class
Identifies the class map you created in Step 1.

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model