topic Re: Has FPR1120 supported ASA yet? in Network Security

Has FPR1120 supported ASA yet?

CSCO13058904 — Fri, 21 Feb 2020 17:28:41 GMT

Hi,

According to the following link https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html, it states that for FPR1000 Series "Support for Cisco® Adaptive Security Appliance (ASA) Firewall will be added in a later release."

Can someone tell me whether FPR1120 model can now run ASA or not, or when it will support ASA?

Have a nice day.

Best Regards,

Thank you.

Re: Has FPR1120 supported ASA yet?

Marvin Rhoads — Tue, 10 Sep 2019 16:49:05 GMT

It will be supported when ASA software 9.13 is released.

We currently expect that to be next month (October 2019).

Re: Has FPR1120 supported ASA yet?

giovanni.augusto — Tue, 10 Sep 2019 12:12:25 GMT

Hi Marvin

Will it support ASA+Firepower Services ?

Or will it support ASA and FTD images exclusively ?

Thanks in advance!

Re: Has FPR1120 supported ASA yet?

Marvin Rhoads — Thu, 17 Oct 2019 12:37:05 GMT

When any Firepower series appliance runs an ASA image it is without Firepower services.

That applies whether it is 1100, 2100, 4100 or 9300 series.

If you need NGFW features then the FTD image is the way to go.

Re: Has FPR1120 supported ASA yet?

CSCO13058904 — Tue, 10 Sep 2019 13:05:52 GMT

Thank you so much for the information.
It is of a great help.

Re: Has FPR1120 supported ASA yet?

dankennedy — Thu, 17 Oct 2019 11:05:08 GMT

9.13.1 is now available and does support ASA for the Firepower 1120, 1140, and 1150.

For ordering new devices when the customer want's to use ASA on a 1140 for example, what is the partcode for this?

Re: Has FPR1120 supported ASA yet?

Marvin Rhoads — Thu, 17 Oct 2019 12:46:16 GMT

The Cisco ordering tool hasn't been updated just yet (as of today 17 October 2019) to allow us to specify ASA image.

For now you would have to order FPR1140-NGFW-K9 or FPR1140-BUN without any subscriptions and then reimage the device with ASA software during staging.

Re: Has FPR1120 supported ASA yet?

dankennedy — Thu, 17 Oct 2019 15:01:09 GMT

Ok that would be fine, but I also need context licences, any idea what the part number would be?

Re: Has FPR1120 supported ASA yet?

Marvin Rhoads — Thu, 17 Oct 2019 16:14:21 GMT

Good question @dankennedy

It looks like L-FPR1K-ASASC-5= and L-FPR1K-ASASC-10= are the SKUs for 5- and 10-context licenses respectively.

Ordering for Firepower 1000 series with ASA image preloaded are not yet loaded in CCW. I would expect them in the coming weeks since the supporting ASA software 9.13(1) was released on 26 September.

Re: Has FPR1120 supported ASA yet?

dankennedy — Thu, 17 Oct 2019 16:55:51 GMT

Great, thanks.

Re: Has FPR1120 supported ASA yet?

novanetinc — Sat, 14 Dec 2019 01:22:14 GMT

Hello,

Do we need any special license on 1120 to use failover and VPN feature on ASA image? Our model is FPR1120-ASA-K9.

Thanks,

Re: Has FPR1120 supported ASA yet?

garry cordess — Thu, 07 Sep 2023 10:38:46 GMT

Hi,

On CCW with FPR1120-NGFW-K9 no Security Context Licenses such as FPR1K-ASASC-5 / L-FPR1K-ASASC-10 are listed as options.

On the FPR1120-ASA-K9 feature licenses i.e. FPR1K-ASASC-5 (not the 10) is listed.

So the TD code does not support Security Context Licenses?

ASA code does, as it always has?

Is that correct?

Kind regards,

Garry.

Re: Has FPR1120 supported ASA yet?

Marvin Rhoads — Thu, 07 Sep 2023 12:36:54 GMT

Security Contexts are a feature only available with ASA image devices. The 1120 only offers 2 included or 5 optional licenses maximum. See Table 2 here: https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

Threat Defense image does not have the concept of security contexts. The closest feature is multi-instance which is only available on the 3100 series and higher since it actually is completely virtual firewall instances running as containers with dedicated hardware resources (CPU and memory).