topic ASA 5525-X Multiple Context Web Security Essentials Licensing in Network Security

ASA 5525-X Multiple Context Web Security Essentials Licensing

justin.b.pruitt — Tue, 12 Mar 2019 03:10:12 GMT

Hello,

I am purchasing a 5525-X IPS Edition model firewall with 5 security context licenses. I have a question about licensing. When activating a feature license, such as Web Security Essentials, do you actiavte it under the firewall context or under the admin context. The reason I am asking is that I am trying to figure out how may Web Security Essentials licesnes to buy. Do we buy 1 for the device, or 1 for each context?

Thanks in advance,

Justin

ASA 5525-X Multiple Context Web Security Essentials Licensing

Collin Clark — Wed, 27 Nov 2013 19:51:28 GMT

You would enable the license under the system context. The license covers all the security contexts. As of today, you can't run WSE and IPS. The software for that is supposed to be released soon. The rumor is that it will not be running full IPS, only a subset of features.

Hope it helps.

Re: ASA 5525-X Multiple Context Web Security Essentials Licensin

Marvin Rhoads — Wed, 27 Nov 2013 23:44:46 GMT

Actually the IPS for NGFW (CX) was slipstreamed in to 9.2 CX software last month. It's just not orderable quite yet. 🙂

It does have less configuration options than the classic Cisco IPS but it is better in other ways. The subscription service should be orderable this month.

Sent from Cisco Technical Support iPad App

ASA 5525-X Multiple Context Web Security Essentials Licensing

justin.b.pruitt — Fri, 06 Dec 2013 19:51:30 GMT

That is exactly what I needed to know. Thank you!

ASA 5525-X Multiple Context Web Security Essentials Licensing

Marvin Rhoads — Fri, 06 Dec 2013 19:56:11 GMT

You're welcome. Please rate helpful replies and mark your question as answered.

ASA 5525-X Multiple Context Web Security Essentials Licensing

shillings — Tue, 10 Dec 2013 15:47:13 GMT

Marvin Rhoads wrote:

Actually the IPS for NGFW (CX) was slipstreamed in to 9.2 CX software last month. It's just not orderable quite yet.

It does have less configuration options than the classic Cisco IPS but it is better in other ways. The subscription service should be orderable this month.

Hi Marvin, any idea if it will support multiple security contexts? We don't get a proper update on the NG IPS until next week and I can't reach our Security SE

ASA 5525-X Multiple Context Web Security Essentials Licensing

Marvin Rhoads — Tue, 10 Dec 2013 16:32:54 GMT

The NGFW IPS does support multi-context mode ASA.

However the policies on the IPS itself are global (like those for the earlier CX WSE and AVC features) so they are common across all contexts that are directing traffic to it via their respective service policies.

The events (in PRSM) will display the name of the context whose traffic triggered the event.

Hope this helps.

ASA 5525-X Multiple Context Web Security Essentials Licensing

shillings — Tue, 10 Dec 2013 16:39:02 GMT

Thanks Marvin!

ASA 5525-X Multiple Context Web Security Essentials Licensing

Marvin Rhoads — Tue, 10 Dec 2013 16:40:39 GMT

You're welcome. Please rate it if the answer was helpful.

i need to state a correction.

INGENIERIA Y CONSULTORIAS WEBREDES LTDA — Sat, 12 Apr 2014 05:26:33 GMT

i need to state a correction..

the IPS or WSE/AVC virtual appliances are not available under multi-context by now.

even on 9.1 asa code.

so take this in care before buy the context and the WSE/AVC or IPS or both.

best regards