CCNP Security Question of the Week: ASA AIP-SSM and ASA AIP-SSC

July 10, 2015 Johnny Bass Cisco, Cloudera, Featured, Professional Development, Project Management, Routing & Switching, Technology, Training in Business

Which of the following features are supported on the Cisco ASA AIP-SSM, but not supported on the Cisco ASA AIP-SSC? (Choose four.)

A. Promiscuous mode.
B. Fail open.
C. Multiple virtual sensors.
D. Anomaly detection.
E. Custom signatures.
F. Global correlation.

Reveal Answer

Answer: C, D, E and F.

The Cisco AIP SSM and AIP SSC are part of the Cisco ASA 5500 Series Adaptive Security Appliance solution, which provides superior firewall and VPN capabilities in a single, easy-to-deploy platform.

With the advanced inspection capabilities of the Cisco AIP SSM or Cisco AIP SSC, this appliance provides integrated, converged protection of your servers and infrastructure. The AIP-SSC is for the ASA 5505, which is the entry level ASA firewall; the SSM can be installed in the ASA 5510, 5520 and 5540 firewalls. The ASA 5505 and AIP-SSC is limited in capability, therefore some of the more advanced feature are not supported.

Related Resources
Cisco White Papers

Related Course
CCNP Security e-Camp

CCNP Security Question of the Week Series

CCNP Security Question of the Week: Cisco ASA Security Context
CCNP Security Question of the Week: Authenticating ASDM Users
CCNP Security Question of the Week: Layer 5–7 Policy Maps
CCNP Security Question of the Week: 802.1X
CCNP Security Question of the Week: IPS Updates
CCNP Security Question of the Week: IPsec VPN Tunnels
CCNP Security Question of the Week: AnyConnect VPN Client
CCNP Security Question of the Week: ASA AIP-SSM and ASA AIP-SSC

Please support our Sponsors here :