Cisco 5510 - ASA SSL / IPsec VPN Edition, Руководство по началу работы

Страница: 172 / 208

Chapter 13 Configuring the AIP SSM
Configuring the AIP SSM
13-6
Cisco ASA 5500 Series Getting Started Guide
78-19186-01
Configuring the AIP SSM
This section includes the following topics:
•
AIP SSM Procedure Overview, page 13-6
•
Sessioning to the AIP SSM, page 13-6
•
Configuring the Security Policy on the AIP SSM, page 13-8
•
Assigning Virtual Sensors to Security Contexts, page 13-9
•
Diverting Traffic to the AIP SSM, page 13-11
AIP SSM Procedure Overview
Configuring the AIP SSM is a process that includes configuration of the AIP SSM
and then configuration of the ASA 5500 series adaptive security appliance:
1.
Session to the AIP SSM from the adaptive security appliance. See the
“Sessioning to the AIP SSM” section on page 13-6 .
2.
On the AIP SSM, configure the inspection and protection policy, which
determines how to inspect traffic and what to do when an intrusion is
detected. Configure the inspection and protection policy for each virtual
sensor if you want to run the AIP SSM in multiple sensor mode. See the
“Configuring the Security Policy on the AIP SSM” section on page 13-8 .
3.
On the ASA 5500 series adaptive security appliance in multiple context
mode, specify which IPS virtual sensors are available for each context (if you
configured virtual sensors). See the
“Assigning Virtual Sensors to Security
Contexts” section on page 13-9 .
4. On the ASA 5500 series adaptive security appliance, identify traffic to divert
to the AIP SSM. See the
“Diverting Traffic to the AIP SSM” section on
page 13-11 .
Sessioning to the AIP SSM
To begin configuring the AIP SSM, session to the AIP SSM from the adaptive
adaptive security appliance. (You can alternatively connect directly to the AIP
SSM management interface using SSH or Telnet.)