topic hi marvin, in Network Security

Avail ASA5506-X without FirePOWER

johnlloyd_13 — Tue, 12 Mar 2019 07:13:15 GMT

hi all,

i'm about to purchase a 5506-X and would like to know if i can avail it without the FirePower and SSD, etc?

i just need to use the ASA for a branch site and create a S2S VPN back to our HQ.

Part Number	Description	Qty
ASA5506-K9	ASA 5506-X with FirePOWER services, 8GE, AC, 3DES/AES	1
ASA5506-SSD	ASA 5506-X SSD	1
SF-ASA-FP5.4.1-K9	Cisco FirePOWER Software v5.4.1 for ASA 5500-X	1
ASA5506-CTRL-LIC	Cisco ASA5506 Control License	1
SF-ASA-K-9.5-K8	ASA 9.5 Software image for ASA 5506/5508/5516 series	1
ASA5500-ENCR-K9	ASA 5500 Strong Encryption License (3DES/AES)	1
ASA5506-PWR-AC	ASA 5506-X Power Adaptor	1
ASA5506-SEC-PL	ASA 5506 Sec. Plus Lic. w/ HA, DMZ, VLAN trunk, more conns.	1

I think you might be able

Philip D'Ath — Mon, 01 Feb 2016 08:57:54 GMT

I *think* you might be able to do with this the SKU ASA5506-K8.

But I don't recommend you do it. Buy the ASA5506-K9. Note that it doesn't actually come with FirePower. You have to buy separate licences for that. It is just capable of running Firepower.

Hello, John!

Boris Uskov — Mon, 01 Feb 2016 09:06:56 GMT

Hello, John!

As far as I know, ASA5506 will always be equipped with SSD disk and SFR software pre installed. So, the specification, which you sent, is the minimum (except SEC-PLUS license) equipment and can not be reduced.

Also, pay an attantion, if you are going though to launch FirePOWER services sometime later (maybe after one or two years) on ASA5506, I'll need to order additional FirePOWER licenses: URL subscription, IPS subscription, IPS+AMP subsription or any combination of those.

hi boris,

johnlloyd_13 — Tue, 02 Feb 2016 02:11:03 GMT

hi boris,

i clarified with the vendor and the ASA 5506-X does come with SFR image and SSD. i was quoted for the appliance and a pricey SEC PLUS license (ASA5506-SEC-PL).

may i know if i can avail just the BASE license? what's the SKU for the BASE license.

John Loyd,

Marvin Rhoads — Tue, 02 Feb 2016 05:28:38 GMT

John Loyd,

If you don't need of want it, just have the vendor omit the ASA5506-SEC-PL line item. That is a separately priced SKU.

K8 vs. K9 just designates whether the free 3DES-AES license come pre-installed. there's otherwise zero difference between those variations, including FirePOWER capability.

hi marvin,

johnlloyd_13 — Tue, 02 Feb 2016 05:39:36 GMT

hi marvin,

thanks! i've asked our vendor to quote us with just a BASE license which will give me about 10 S2S IPsec VPNs.

i was surprised they gave a price of the 5506-Xwhich is around USD 760. is this price normal? i was expecting around USD 1000+.

is it because pricing depends on licensing/features?

Hello, John!

Boris Uskov — Tue, 02 Feb 2016 07:05:17 GMT

Hello, John!

The GPL Price for the very base ASA5506-K9 (without SEC-PLUS Licenses, without SFR subsriptions, without smartnet) is 995$. But it is completely enough for branch office and Site-to-Site VPNs.

So, I think, the 760$ is a normal price for official cisco partner|reseller. They usually can give you a discount around 20% from GPL price.