topic The Security modules don't in Network Security

FirePOWER licenses for ASA5525X HA redundant pair

Nay-Sayer — Tue, 26 Mar 2019 00:58:28 GMT

I have a pair of ASA5525Xs setup as HA redundant pair and I would like to deploy FirePOWER AMP, IPS and URL filtering licenses to these devices. My question is; do I need FirePOWER licenses for each device. Or, since the devices are setup in HA configuration, will each device share a single FirePOWER license for AMP, IPS and URL filtering?

Thanks.

The Security modules don't

Karsten Iwen — Tue, 22 Mar 2016 23:13:45 GMT

The Security modules don't share any state or sync anything. They even don't know of each other and operate completely independently. You need two FirePOWER licenses, one for each module and for configuration a FirePOWER management Center. The later can be setup virtually on VMware and there is a quite inexpensive 2 device license for HA-systems like these. Have your ASAs already an SSD? If not, you also need to order these.