ASA 55x5X - IPS license

[radekpitr]

Hi all,

Do anyone know if licence for ASA5525X to run ISP softModule is needed just for cluster or each node separatelly?

As with contexts and SSL/VPN licensing its combined but have not idea how it is with IPS licencse.

Thanks for any suggestions!

[cmhouser01]

Yes.  For the ASA 5512-X through the ASA 5555-X, each ASA requires the IPS Module license. For a failover pair, each unit requires this license. 

[sokakkar · Accepted solution]

Hello Radek,

IPS in ASA5500-X series has two serial numbers. One on chassis and another on PCB:

SmartNet and Cisco Service for IPS entitlement contracts: based on the chassis serial number
ASA PAK license to enable IPS software module: based on the PCB serial number
IPS signature update license key: based on the PCB serial number.                                         

For ASA-55x5-IPS-K9, two license keys are needed:

1. License key on ASA to activate IPS platform:                                                  

Show version on ASA will show an activation-key but IPS disabled. So, install the activation-key to enable IPS on ASA using 'activation-key' command.

2. License to be applied to IPS for signature updates:

If there is no license applied, 'Show version' on IPS will show 'no license key present'. Install the license using IDM/IME or CLI. 

Further, ASA 55x5 has two serial numbers: Chassis and PCB.

- PCB serial number is same for both ASA55x5 and IPS. And it is used to obtain license for IPS activation on ASA (to be applied on ASA) and IPS signature update (to be applied on IPS).

- Chassis serial number is used for Entitlement for ASA and IPS and Smartnet while opening up a TAC case.

-

Sourav

[radekpitr]

Hi "sokakkar",

Thank you for fullfit answer!

Radek

[sokakkar]

No Problem Radek. Glad I could help!

Please mark the correct answer to close this topic, if you've any follow up questions, feel free to post those.

-

Sourav

Please ensure to rate the helpful posts. Ask question if you need further help.