ASA5555-FPWR-K9 vs ASA5555-K9

[User404]

Hello together,

can someone explain, what is the effective difference between the following models in hardware and licensing?

ASA5555-K9 - ASA 5555-X with SW, 8GE Data, 1GE Mgmt, AC, 3DES/AES

ASA5555-FPWR-K9 - ASA 5555-X with FirePOWER Services, 8GE data, AC, 3DES/AES, 2 SSD

The description says it's with "FirePOWER Services" but as far as I understand it right, I have to book the services I need separately anyways.

Furthermore, does the unit come with at least 1 SSD per default or need it to be ordered separately in any case?

Thank you!

[Marvin Rhoads · Accepted solution]

The first one does not include SSDs that are necessary for a working Firepower service module. On the ASA 5555-X that's two each SSDs in a RAID configuration.

The ASA5555-FPWR-BUN does include the SSDs and the Cisco ordering tool (CCW) will prompt the person making the order to select Firepower subscriptions (IPS, URL and/or AMP) to fully license the features of the module.

[User404]

Hello Marvin,

thank you for your answer!

ASA5555-FPWR-BUN includes the SSDs but what is with the base PN "ASA5555-FPWR-K9" does it also include the SSD's by default?

Is it technically possible to use an "original" Firepower ASA with an upgraded version as HA pair?

Thank you!

[Marvin Rhoads]

The ASA5555-FPWR-K9 does include the SSDs. It just doesn't require adding Firepower licenses to validate/complete the order.

You can create an HA pair between SSD and non-SSD appliances but you will have to uninstall the sfr (firepower) module on the one that has that.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/ha-failover.html#ID-2107-0000001c