Solved

Cisco ASA - turn off all Intrusion Detection/Prevention

Posted on 2013-01-28
3
884 Views
Last Modified: 2013-11-29
I have an ASA 5510 on the perimeter of my network.  During PCI-compliance scans, it seems to be inhibiting the security company from completing the test.  I originally had "Enable basic threat detection" checked, because I thought that only logged threats.  And then I unchecked even that, but the security scan still fails with a note that states that Interference is being detected.  Is there another area of the FW that also supports intrusion detection settings?  Or do I possibly have some unknown device on my network causing trouble?  thanks
0
Comment
Question by:SIDESHOWBLAH
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
ryan80 earned 500 total points
ID: 38828707
If you look at this manual, you will see that you have to define the traffic that is being sent to the  IPS module.

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliSSM.html#wp1030972

So if you remove the policy-map or class that is being used to define the IPS inspection, nothing will go to the IPS module.
0
 

Author Comment

by:SIDESHOWBLAH
ID: 38828782
I have removed the IPS reference entirely.
0
 
LVL 12

Expert Comment

by:ryan80
ID: 38828814
Then nothing should be going through the IPS module.

What makes them think that there is interference?
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

It’s the first day of March, the weather is starting to warm up and the excitement of the upcoming St. Patrick’s Day holiday can be felt throughout the world.
Ransomware continues to grow in reach and sophistication, putting data everywhere at risk. Learn how to avoid being caught in its sinister clutches with these 11 key tips.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question