ASA X Arch.

[communication.boy]

I have been looking into the following link for model comparision

http://www.cisco.com/en/US/products/ps6120/prod_models_home.html

For the New Firewalls i.e. 5512X , 5515X etc there seems to be intergrated IPS and we dont need to order any extra license or part number to get the IPS features .

But for the 5585X It says 2Gbps for SSP10 engine but I have seen in the Dynamic Configuration Tool that SSP10 and IPS-SSP10 are different things . Which means that I will have to order 2 service engines SSP10 and IPS SSP10 to get the IPS features and if I only order SSP10 with that Chasis I will only get firewalling  ?

[Maykol Rojas · Accepted solution]

Hi,

Maybe this would clear up things a bit:

The Security Services Processor (SSP) resides in  slot 0 (the bottom slot) and an additional SSP or optional Intrusion  Prevention System Security Services Processor (IPS SSP) resides in slot 1  (the top slot). All port numbers are numbered from right to left  beginning with 0.

So bottom line, yes, if you want IPS, you will need to buy the bundle:

http://www.cisco.com/en/US/docs/security/asa/hw/maintenance/5585guide/overview.html#wp1078820

Mike

[communication.boy]

But if i go for ASA 5512 , 5515 , 5525, 5545 . IPS is integrated with that and no need to purcahse anything extra right ?

[Marvin Rhoads]

No extra hardware is requires on the ASA X series.

You still need to buy the license (in the bundle package for new orders). See "IPS Edition Bundles" on table 6 of the Data Sheet.