ASA IP Audit and/or IPS?

[tekinfmgr]

With an ASA with the IPS sensor module, is it better just to off load and totally rely on the IPS sensor. Should IP audits still be enabled?

Currently I am running an ASA 5510 - AIP -SSM with IPS, I have noticed that surfing the web seems to be more reponsive when the IP audits are disabled and just the IPS sensor is doing the work. I also use IME with is doing a fine job of generating alerts.

Thank you for your recommendations with this.

 

[North323]

i think you are on the right track...when IP audits are enabled, what is the cpu of the ASA?