topic Re: Cisco ASA 5512 in Network Security

Cisco ASA 5512

Kalpesh Devmurari — Tue, 04 Apr 2017 16:22:24 GMT

Hello Everyone,

I am running with Cisco ASA 5512 hardware with Firewall, VPN and IPS functionality. Just wanted to check if I can add other security features like Anti-Virus, Anti-Spam, Web & App filtering, WAF to the device. Not sure how to integrate Firepower functionality with my Cisco ASA 5512 without making any changes in hardware. I want to implement all security features.

Please advise.

Re: Cisco ASA 5512

LSF — Thu, 04 May 2017 18:39:04 GMT

Hi,

you must un-install your IPS module - reinstall the SFR module which will give you Firepower services for ASA. You can then keep the VPN functionality as you will still have your ASA running as before. Then you will have the ability to run URL filtering, NG-IPS, and AMP(advanced malware protection).

second option is to wait for the FTD 6.2.1 release coming with is the new consolidated image with also includes remote access VPN.

Hope that answers your question.

/Linda

Re: Cisco ASA 5512

Samer R. Saleem — Tue, 09 May 2017 19:49:43 GMT

hi,

you can use get TAM, TAMC license which is used for advanced malware protection and the latter one for URL filtering as well, but it wont work as anti-virus, you need to have distributed layers of security

for example

client antivirus

server antivirus

email security

firewall or Next generation firewall

plus many security features that need your proactive approach to enable and use.

good luck

Re: Cisco ASA 5512

Dennis Perto — Wed, 10 May 2017 12:38:28 GMT

The only hardware change you need to install Firepower is an addition of a 120GB SSD drive.