ASA 5506-X with FirePower services

[Roy Lee]

Dear All,

We need to connect a branch office to headquarters by site to site VPN.

We got quotation from vendor for 5506-X with FirePower services with following items:

I think for site to site VPN, firepower is not necessary, but this is already the basic model.

I would like to know is it possible to disable the firepower function (or module?) and use purely ASA function?

Thanks.

Roy

[Rahul Govindan · Accepted solution]

If you do not enable the Firepower functionality on the ASA, it works like a traditional ASA software. In order to enable Firepower services, you would need to

1) install the software on the Firepower software module

2) Register it to ASDM or FMC

3) pass traffic to it using a service policy. 

https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-150498

IF you don't do #3, you should be good to use it as an ASA doing just VPN.