Cisco 500 Series, Configuration Manual

Page: 411 / 1140

C H A P T E R
22-1
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
22
Managing the AIP SSM and CSC SSM
This chapter describes how to configure the adaptive security appliance to support an AIP SSM or a CSC
SSM that is installed in the security appliance.
For information about the 4GE SSM for the ASA 5000 series adaptive security appliance, see Chapter 5,
“Configuring Ethernet Settings, Redundant Interfaces, and Subinterfaces” .
Note
The Cisco PIX 500 series security appliances do not support SSMs.
This chapter includes the following sections:
• Managing the AIP SSM, page 22-1
•
Managing the CSC SSM, page 22-9
• Checking SSM Status, page 22-18
•
Transferring an Image onto an SSM, page 22-19
Managing the AIP SSM
This section includes the following topics:
• AIP SSM Overview, page 22-1
•
Sessioning to the AIP SSM, page 22-5
• Configuring the Security Policy on the AIP SSM, page 22-6
•
Assigning Virtual Sensors to Security Contexts, page 22-6
• Diverting Traffic to the AIP SSM, page 22-8
AIP SSM Overview
You can install the AIP SSM into an ASA 5500 series adaptive security appliance. The AIP SSM runs
advanced IPS software that provides proactive, full-featured intrusion prevention services to stop
malicious traffic, including worms and network viruses, before they can affect your network. This
section includes the following topics:
• How the AIP SSM Works with the Adaptive Security Appliance, page 22-2
•
Operating Modes, page 22-2