Cisco ASA  5510 content filter

Posted on 2012-09-12
Last Modified: 2012-12-02
Can anyone tell how to disable it from a command prompt? it is the built in trendmicro flavor..............
Question by:jmenze
    LVL 20

    Accepted Solution

    There's not necessarily a cut and dry command to get the job done. These are usually configured in the ASA's service policies at the very end of the configuration. Most times it is configured under the global service policy.

    Taken from:

    "The following example diverts all IP traffic to the AIP SSM in promiscuous mode, and blocks all IP traffic should the AIP SSM card fail for any reason:
    hostname(config)# access-list IPS permit ip any any
    hostname(config)# class-map my-ips-class
    hostname(config-cmap)# match access-list IPS
    hostname(config-cmap)# policy-map my-ips-policy
    hostname(config-pmap)# class my-ips-class
    hostname(config-pmap-c)# ips promiscuous fail-close
    hostname(config-pmap-c)# service-policy my-ips-policy global

    The above shows the class-maps that will be nested in the service policy. Essentially you need to find how the IPS commands are tied in to your service policy(ies) and remove them, or you can create a new service policy without any of the IPS commands and then set that as the global policy.

    Author Closing Comment

    Thank you.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    This article is in response to a question ( here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
    Is your computer hacked? learn how to detect and delete malware in your PC
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now