currently running ASA Version 7.2(2)22.. just 2 questions

[geranimo666]

Hello to all-

Based on the ASA Version 7.2(2)22 bin I'm running on my appliance. I suppose implementing a full fledge VPN solution shouldn't be an issue. I would also like to configure an Intrusion Prevention System (IPS or IDS.. whatever the proper acronym is) to take the place of my Websense. I've read many articles that this can be done using the ASA but how true the reality of this is -is currently unknown to me.

Could I implement an IPS solution using 7.2(2)22 or would I need to purchase a physical module to support this? or perhaps upgrade the image to something higher as well? Just looking for folks here that might have been thru this process and are willing to share any direction in all this.

Any info would truly be appreciated.

geranimo

 

[Supergrrover]

IPS/IDS and websense are too different solutions.

Websense limits website access (as well as virus protection.) It is more like the CSC SSM Module.

http://www.cisco.com/en/US/products/ps6120/products_data_sheet0900aecd80402e4f.html

For IPS, you would get a different module - the AIP SSM.

http://www.cisco.com/en/US/products/ps6825/index.html

Hope this helps.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[geranimo666]

Thanks Supergrover,

Seems like we do need both independent solutions for our ASA5510, I'll go thru our vendor and get some prices.

Thanks again..

geranimo

 

[Supergrrover]

It's a one or the other deal. There is only one slot for the module.

You can integrate the AIP with your current websense since you already have it. I think that would be the way to go.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[geranimo666]

Yes Supergrover, that is the way I plan to go, since Websense is already established.. would you know off hand what an approximate cost for the AIP mod would be for my ASA5510? Just a ballpark figure? Barring I don't need to upgrade the image which is currently running 7.2(2)22.. bins are usually a free upgrade anyway.

Thanks again man!

geranimo

 

[Supergrrover]

Price varies depending on what kind of vendor deals you have going. A lot of my clients use CDW. They aren't the cheapest but I like their customer support.
Price is a little rough - ~$4K-6K (for the SSM-AIP-10.)



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[geranimo666]

Thanks Supergrover,

And this will integrate with my ASA5510 current image 7.2(2)22 ?

Thanks eitherway, for you wealth of knowledge here!

geranimo