ASA 5505x - Firepower services integration

[Sureshkumar B]

Hi Team, We have ASA 5505-x Series with firepower license, and ASA is managed through ASDM and working fine in production and currently we have requirement to run URL/IPS/AMP license we procured hence we would like to utilize the same with impacting the ASA Firewall feature and dont want to migrate to FTD OS. Also firepower is installed in SFR module, hence how this firewall can be activated. Please share some suggestion and solutions.

[Marvin Rhoads]

Cisco has a Quick Start Guide for your use case. It can be found here:

https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

Have a look at it and let us know if you have further questions.

[Sureshkumar B]

Hi There, I have deployed the license and unable to view control and protection license, but Malware and url licenses are active and shows expiring date. Due to which i facing issue in policy deployment and shows error message as There is no Protection lincense. We do have License for Cisco ASA5506 FirePOWER IPS, AMP and URL Licenses. Please suggest on this.

[Marvin Rhoads]

The Protect+ Control license is a free license that is provided with the 5500-X series when they are purchased with Firepower service module preconfigured. If they were purchased with older module types (legacy IPS or CX modules types) you have to order the no cost SKU to get the license.

Either way, that license is required in order to use any of the paid licenses (IPS, Malware or URL Filtering).

Your vendor should be able to assist you if the original license was lost. (The Cisco order fulfillment system will show the PAK number as part of the delivered items.)