I would like to clarify if the ASA 5500-X with firepower services AMP feature includes email security, web security and endpoint security? Is it per license for those 3 security feature?
Email Secruity (Using Security Intelligence feature and Web Security are covered with URL filtering license. Endpoint security is covered under Malware license.
Email and Web security -> URL Filter License
AMP for Networks/ASA -> AMP
AMP for Enpoints -> AMP for Endpoint License(s). Minimum order is 50.
You'll notice the two AMP licenses are different. When we talked with Cisco and our reseller about what we wanted and they showed us the product, they did not make that distinction very well.
Hope that helps.