Improve company productivity with a Business Account.Sign Up

x
?
Solved

Cisco ASA - turn off all Intrusion Detection/Prevention

Posted on 2013-01-28
3
Medium Priority
?
909 Views
Last Modified: 2013-11-29
I have an ASA 5510 on the perimeter of my network.  During PCI-compliance scans, it seems to be inhibiting the security company from completing the test.  I originally had "Enable basic threat detection" checked, because I thought that only logged threats.  And then I unchecked even that, but the security scan still fails with a note that states that Interference is being detected.  Is there another area of the FW that also supports intrusion detection settings?  Or do I possibly have some unknown device on my network causing trouble?  thanks
0
Comment
Question by:SIDESHOWBLAH
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
ryan80 earned 2000 total points
ID: 38828707
If you look at this manual, you will see that you have to define the traffic that is being sent to the  IPS module.

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliSSM.html#wp1030972

So if you remove the policy-map or class that is being used to define the IPS inspection, nothing will go to the IPS module.
0
 

Author Comment

by:SIDESHOWBLAH
ID: 38828782
I have removed the IPS reference entirely.
0
 
LVL 12

Expert Comment

by:ryan80
ID: 38828814
Then nothing should be going through the IPS module.

What makes them think that there is interference?
0

Featured Post

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

A discussion about Penetration Testing and the Tools used to help achieve this important task.
It has been a full year since one of the worst ransomware attacks we have seen, the Wannacry attack last year. The attacks have changed.  The way we are addressing them has also changed, but maybe not enough.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

585 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question