So transparent mode is equivalent to a L2 bridge, i.e. bump in the wire ? In this case I have to use 2 interfaces of the ASA and use it "as a physical tap" ?
Selon Fred Reimer <[EMAIL PROTECTED]>: > You can put the ASA in transparent mode so that you don't have to > "route" through it, but the traffic does have to pass through the > device. The external Ethernet interface on the AIP is strictly > for management only... > > > > Fred Reimer, CISSP > Senior Network Engineer > Coleman Technologies, Inc. > 954-298-1697 > > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Friday, October 19, 2007 11:16 AM > To: [email protected] > Subject: [c-nsp] ASA/AIP-SSM-10 to replace a IDS-42xx > > Hi, > > Is it possible to use an ASA with a AIP-SSM-10 like a "simple" > IDS sensor ? Idea > is to span a vlan on a switchport, then connect and use the > physical GE > interface featured on the AIP-SSM-10 module to sniff traffic and > report alerts. > No IPS functionnality is needed. > > Is such a way of using AIP-SSM sensor possible ? Or, do I have to > filter the > traffic thru the underlying ASA appliance absolutely ? > > Basically, I don't want to add a routing/firewall instance on my > network. Just a > transparent IDS. > > -jc > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
