Cisco ASA 5508-X and ASA 5516-X Quick Start Guide
2.
Choose Add > Add Service Policy Rule.
3.
Choose whether to apply the policy to a particular interface or apply it globally and click Next.
4.
Configure the traffic match. For example, you could match Any Traffic so that all traffic that passes your
inbound access rules is redirected to the module. Or, you could define stricter criteria based on ports, ACL
(source and destination criteria), or an existing traffic class. The other options are less useful for this policy.
After you complete the traffic class definition, click Next.
5.
On the Rule Actions page, click the ASA FirePOWER Inspection tab.
6.
Check the Enable ASA FirePOWER for this traffic flow check box.
7.
In the If ASA FirePOWER Card Fails area, click one of the following:
—
Permit traffic—Sets the ASA to allow all traffic through, uninspected, if the module is unavailable.
—
Close traffic—Sets the ASA to block all traffic if the module is unavailable.
8.
(Optional) Check Monitor-only to send a read-only copy of traffic to the module, i.e. passive mode.
9.
Click Finish and then Apply.
Repeat this procedure to configure additional traffic flows as desired.
8. Where to Go Next
For more information about the ASA FirePOWER module and ASA operation, see the "ASA FirePOWER
Module" chapter in the ASA/ASDM firewall configuration guide, or the ASDM online help. You can find links to
all ASA/ASDM documentation at
For more information about ASA FirePOWER configuration, see the online help or the
user guide
or the
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To
view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other
company. (1110R)
© 2016 Cisco Systems, Inc. All rights reserved.
Navigating the Cisco ASA Series
FireSIGHT/Firepower Management Center system user
8. Where to Go Next
Documentation.
ASA FirePOWER module
guide.
7
Печатать страницу