topic Re: ASA 5555 FTD context query in Network Security

ASA 5555 FTD context query

ashwanigu — Wed, 08 Apr 2020 17:20:19 GMT

Hi Friends,

I have gone through the web and found that ASA 5555 FTD comes with a default 2 context license.

so my query is as below.

can we create two context admin+2?

or we can be able to create admin+1?

my requirement is to create 2 customer contexts and an admin context.

Thanks in advance

Regards

Ash

Re: ASA 5555 FTD context query

Sheraz.Salim — Wed, 08 Apr 2020 18:02:26 GMT

I think you have read it wrong. ASA 5555-X with ASA code come with a default 2 context.

can we create two context admin+2

yes you can create 2 context and 1 admin with 2 default context licences out of the box.

Re: ASA 5555 FTD context query

Marvin Rhoads — Thu, 09 Apr 2020 05:00:51 GMT

As @Sheraz.Salim FTD on any ASA model does not support multi-instance (the FTD analogue to multi-context). To support FTD multi-instance you need Firepower 4100 or 9300 series appliances.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/firepower_threat_defense_logical_devices_for_the.html#id_77542

With Firepower 6.6 we also have the capability to support multi-VRF. That may address some of the use cases whee we had previously used multiple contexts on traditional ASAs.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/virtual-routing-for-firepower-threat-defense.html