Chapter 5. Additional Intrusion Detection and Prevention Devices

ASA Modules

There are several options for including Intrusion Detection and Prevention modules into Cisco Adaptive Security Appliances. Each of the available modules provides common features, but at different performance levels.

For the Cisco ASA-5510, ASA-5520, and ASA-5540 appliances, three IPS modules are available: the AIP-SSM-10, AIP-SSM-20, and AIP-SSM-40, shown in Figure 5-1. These Advanced Inspection and Prevention Security Services Modules (ASA AIP-SSM) are a powerful option for providing intrusion detection system (IDS) or intrusion prevention system (IPS) services.

Figure 5-1. ASA AIP-SSM

For the Cisco ASA-5505 appliance, a single card, called the AIP-SSC-5, is available. ...

Get CCNP Security IPS 642-627 Quick Reference, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.