ASA firepower + firesight licensing question

[pmlam3274]

I am currently planning on upgrading the current ASA IPS-SSM to firepower.  Can someone confirm if the following licenses and product are all i needed?

1. Model: Cisco - solid state drive - 120 GB (Part number: ASA5500X-SSD120=)

2. Model: CISCO FIREPOWER IPS AMP SUB 3Y (Part: L-ASA5525-TAM-3Y)

3. Model: Cisco FireSIGHT Management Center Virtual Appliance – license (Part number: FS-VMW-SW-K9)

[Ji-Won Park · Accepted solution]

Yes, you got the most part right.. additionally, you would need SmartNET for SSD drive and SW UPGRADE for FIRESIGHT.

Also, you need TAMC to use URL filtering i'm sure you're aware of it..

Make sure you also get CONTROL license - this is something I missed last time...

Here's the ordering guide:

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-x-series-next-generation-firewalls/guide-c07-732249.pdf?keycode=000035512

Here's the quick start guide - you need to shutdown and uninstall your module:

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

Thanks

g1

[pmlam3274]

Thank you for replying my question.  I actually found this website www.cisco.com/go/ccw .  this website helps alot on what license is required.

Anyway, My company currently use a different product for URL filtering.  can you tell me if it is worth it to get TAM or should I just stay with TA?

[Ji-Won Park]

CCW is a great tool to check part numbers and pricing etc...

If you have a different product that does URL filtering, then you either want to go with TA or TAM. TAM includes FirePOWER AMP subscription which mainly does malware inspection, file filtering, sandboxing etc... TA will only provide IPS functionality.