ASA 5506 SSP Version?

[robertramsey]

Hello,

With the older ASA 5505, 5510, 5520, etc. series devices, you could add an SSP module that would give you IDS/IPS functionality.  This functionality showed up in the ASDM GUI as an additional tab.

The newer ASA 5506-X doesn't have a slot for a module but does show an SSP version in a 'show ver'.  What is this SSP Version referring to?  My ASDM GUI, above, doesn't have the IDS/IPS tab.

Thanks in advance!

[Marvin Rhoads · Accepted solution]

The SSP that appears in "show version" is just cosmetic since Cisco did not update the code module to omit that output for that platform. The ASA 5506-X only ever had the Firepower service module (a software module) available for IPS services.

[robertramsey]

Hello Marvin,

Thanks for the reply.  So, the SSP version info displayed in a 'show ver' is due to legacy code from the older platforms.  You mentioned a software module.  I suppose that software module is something that would be activated with a license then?  I don't see that in my license list.  If the software module was activated, would another tab show up in the ASDM GUI like the older hardware modules?

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 5              perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Disabled       perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
Carrier                           : Disabled       perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 10             perpetual
Total VPN Peers                   : 12             perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
Shared License                    : Disabled       perpetual
Total TLS Proxy Sessions          : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Cluster                           : Disabled       perpetual

This platform has a Base license.

Again, thanks in advance!

[Marvin Rhoads]

The Firepower services software module shows up under "show module" (or in detail via "show module sfr detail").

However the support for this is past end of life and licenses can no longer be purchased. So, if you don't have it already licensed, you are out of luck there.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/200889-Using-ASDM-to-manage-a-FirePOWER-module.html

Check this

MHM