Solved

Cisco ASA - turn off all Intrusion Detection/Prevention

Posted on 2013-01-28
3
876 Views
Last Modified: 2013-11-29
I have an ASA 5510 on the perimeter of my network.  During PCI-compliance scans, it seems to be inhibiting the security company from completing the test.  I originally had "Enable basic threat detection" checked, because I thought that only logged threats.  And then I unchecked even that, but the security scan still fails with a note that states that Interference is being detected.  Is there another area of the FW that also supports intrusion detection settings?  Or do I possibly have some unknown device on my network causing trouble?  thanks
0
Comment
Question by:SIDESHOWBLAH
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
ryan80 earned 500 total points
ID: 38828707
If you look at this manual, you will see that you have to define the traffic that is being sent to the  IPS module.

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliSSM.html#wp1030972

So if you remove the policy-map or class that is being used to define the IPS inspection, nothing will go to the IPS module.
0
 

Author Comment

by:SIDESHOWBLAH
ID: 38828782
I have removed the IPS reference entirely.
0
 
LVL 12

Expert Comment

by:ryan80
ID: 38828814
Then nothing should be going through the IPS module.

What makes them think that there is interference?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Here are the five steps I suggest to every sysadmin to fix the fall-out from a security breach.
The 21st century solution to antiquated pagers.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now