Cisco Advanced Inspection and Protection Security Services Module (AIP-SSM)

The Cisco Advanced Inspection and Prevention Security Services Module (AIP-SSM) for the Cisco ASA 5500 Series shown in Figure 20-3 provides a full-featured intrusion-prevention solution to protect against malicious traffic, including network viruses and worms.

Figure 20-3. Cisco Advanced Inspection and Prevention Security Services Module (AIP-SSM)

Cisco ASA 5500 Series Adaptive Security Appliance coupled with AIP-SSM provide best-in-class firewall and intrusion prevention capabilities in a single, easy-to-deploy platform.

AIP-SSM offers multi-vector threat identification protecting the network from policy violations, vulnerability exploitations, and anomalous activity through detailed inspection of traffic in Layers 2 through 7.

AIP-SSM provides unparalleled converged protection by integrating full-featured IPS functionality directly into the network infrastructure. AIP-SSM offers comprehensive protection for the network by collaborating with other network security resources, providing a proactive approach to protecting the entire network.

Using Cisco IPS sensor software, the Cisco AIP-SSM combines inline prevention services that offer all major functions available in the traditional IPS sensor solution.