https://community.cisco.com/t5/network-security/asa-5545-cx-or-ips-module/m-p/2451947#M45576 <P>Both get signatures from Cisco's SIO.</P><P>Classic modules allow more granularity of control and creation of custom signatures. They also allow non-inline (IDS only) deployments, can be managed by CSM, scale to higher throughput (and are thus better suited for data center deployments) and larger enterprise size deployments (&gt;25 units).</P><P>The CX-based IPS is better integrated with WSE and AVC, provides more of a holistic one-stop approach, and can also leverage SSL decryption policies to inspect the payload.&nbsp;</P> Thu, 08 May 2014 12:45:23 GMT Marvin Rhoads 2014-05-08T12:45:23Z https://community.cisco.com/t5/network-security/asa-5545-cx-or-ips-module/m-p/2451946#M45575 <P>Little confused when researching the ASA5545.</P><P>What would be the benefit of going with the CX module compared to the classic IPS module ? Can both do signatures ?&nbsp;</P> Sun, 10 Mar 2019 13:11:45 GMT https://community.cisco.com/t5/network-security/asa-5545-cx-or-ips-module/m-p/2451946#M45575 smartin 2019-03-10T13:11:45Z https://community.cisco.com/t5/network-security/asa-5545-cx-or-ips-module/m-p/2451947#M45576 <P>Both get signatures from Cisco's SIO.</P><P>Classic modules allow more granularity of control and creation of custom signatures. They also allow non-inline (IDS only) deployments, can be managed by CSM, scale to higher throughput (and are thus better suited for data center deployments) and larger enterprise size deployments (&gt;25 units).</P><P>The CX-based IPS is better integrated with WSE and AVC, provides more of a holistic one-stop approach, and can also leverage SSL decryption policies to inspect the payload.&nbsp;</P> Thu, 08 May 2014 12:45:23 GMT https://community.cisco.com/t5/network-security/asa-5545-cx-or-ips-module/m-p/2451947#M45576 Marvin Rhoads 2014-05-08T12:45:23Z