02-18-2008 07:05 PM - edited 03-11-2019 05:04 AM
Hi Netpros,
Wanting to configured two ASA on failover A/S with IPS module each. In regards to licensing. What would be the best bundle for me to get. I mean I know with PIxes you can have one with UR license and the other one with FO only. Is there something similar to that for ASAs. your expert comment are much appreciated.
Solved! Go to Solution.
02-19-2008 02:04 AM
Hi,
There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.
The comparison chart for ASA's is here:
http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html
Note that if you go for the 5510 you'll need the security plus license to get A/S failover.
Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):
K8 versions of software are available even though they are not listed.
Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.
You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.
HTH
Andrew.
02-18-2008 09:15 PM
There is no concept of UR/R/FO license on ASA unlike Pix
Nobody can suggest you what would be the best bundle for you, however check this link and based on your requirement pick your license.
http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html
02-19-2008 02:04 AM
Hi,
There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.
The comparison chart for ASA's is here:
http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html
Note that if you go for the 5510 you'll need the security plus license to get A/S failover.
Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):
K8 versions of software are available even though they are not listed.
Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.
You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.
HTH
Andrew.
02-19-2008 03:57 PM
Hi Andrew,
Thanks for your reply. I was actually going down the same path. Great to know I was on the same track.
Cheers,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide