07-13-2017 07:26 AM - edited 03-10-2019 06:53 AM
I want to order ASA 5515 with FirePOWER.
Did the new order include free 1 year licence for any FirePOWER feature, or should I purchase automatically licence ?
What is the minimum subscription recommanded ?
Solved! Go to Solution.
07-13-2017 08:50 AM
The only thing you get for free is the Control license. It gives you application visibility but no IPS, URL Filtering or Malware protection.
You should have the IPS subscription at the very least.
I'd give 2nd priority to Malware only because I would first recommend an endpoint protection scheme like AMP for Endpoints. An endpoint product like that gets you ahead of the whole SSL arms race as the files are unencrypted on the endpoint.
Similarly with the URL Filtering I would personally recommend a solution like Cisco Umbrella (former OpenDNS) as more effective.
If you don't have any endpoint or DNS protection then I recommend the full IPS, URL Filtering and Malware licensing.
07-13-2017 08:50 AM
The only thing you get for free is the Control license. It gives you application visibility but no IPS, URL Filtering or Malware protection.
You should have the IPS subscription at the very least.
I'd give 2nd priority to Malware only because I would first recommend an endpoint protection scheme like AMP for Endpoints. An endpoint product like that gets you ahead of the whole SSL arms race as the files are unencrypted on the endpoint.
Similarly with the URL Filtering I would personally recommend a solution like Cisco Umbrella (former OpenDNS) as more effective.
If you don't have any endpoint or DNS protection then I recommend the full IPS, URL Filtering and Malware licensing.
07-13-2017 08:57 AM
Thanks Marvin
07-13-2017 08:59 AM
You're welcome. Thanks for rating.
07-13-2017 11:48 AM
One small addition to
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide