topic Re: ASA as UTM in Network Security

ASA as UTM

sushil — Mon, 11 Mar 2019 17:47:57 GMT

Hi,

Wanted to know can I add AIP,CSC10 etc. module to same hardware.i.e Having a 5510 bundle with me.

My need is to add Anti-x/Antispy,URL filter and IPS.

I was made to understand that all features won't run on the box,can run Anti-x or URL but not both.

Experts inputs on this.

Reg,

Sushil

Jennifer Halim — Wed, 19 May 2010 10:37:15 GMT

No, unfortunately you can only have either the AIP module or CSC module installed in an ASA firewall. You can't have both installed.

You can run either the anti spyware/url filtering feature which is through the CSC module:

OR, the intrusion prevention feature which is through the AIP module:

Hope that helps.

sushil — Wed, 19 May 2010 11:10:43 GMT

Hey,Thanks for prompt reply.

I am simply fail to understand why Cisco is not coming out with all in one box.

Checkpoint,Juniper,Fortinet,Sonicwall etc. are already doing it in one device.

Any specific reason why Cisco is yet to launch any thing like this?

Reg,

Sushil

Jennifer Halim — Wed, 19 May 2010 11:17:29 GMT

As it is actually modular base instead of integrated into the ASA code, it only supports 1 module at the time.

Good suggestion of having multiple features in 1 box, however, sometimes it impacts on the performance of the traffic through the box.