topic The only thing you get for in Network Security

ASA with FirePOWER

fabflorent — Sun, 10 Mar 2019 13:53:09 GMT

I want to order ASA 5515 with FirePOWER.

Did the new order include free 1 year licence for any FirePOWER feature, or should I purchase automatically licence ?

What is the minimum subscription recommanded ?

The only thing you get for

Marvin Rhoads — Thu, 13 Jul 2017 15:50:15 GMT

The only thing you get for free is the Control license. It gives you application visibility but no IPS, URL Filtering or Malware protection.

You should have the IPS subscription at the very least.

I'd give 2nd priority to Malware only because I would first recommend an endpoint protection scheme like AMP for Endpoints. An endpoint product like that gets you ahead of the whole SSL arms race as the files are unencrypted on the endpoint.

Similarly with the URL Filtering I would personally recommend a solution like Cisco Umbrella (former OpenDNS) as more effective.

If you don't have any endpoint or DNS protection then I recommend the full IPS, URL Filtering and Malware licensing.

Thanks Marvin

fabflorent — Thu, 13 Jul 2017 15:57:05 GMT

Thanks Marvin

You're welcome. Thanks for

Marvin Rhoads — Thu, 13 Jul 2017 15:59:13 GMT

You're welcome. Thanks for rating.

One small addition to Marvins

Karsten Iwen — Thu, 13 Jul 2017 18:48:31 GMT

One small addition to Marvins perfect answer: Today, I would consider buying the ASA 5516-X instead of the ASA 5515-X. That device has more physical interfaces, is more modern and powerfull but only slightly more expensive.