05-01-2013 05:10 AM - edited 03-11-2019 06:37 PM
Hi!
I was checking the ASA 5500-X series Next-Generation Firewalls and I noticed that it supports features like IPS, Application Visibility and Control (AVC) and Web Security Essentials (WSE).
I have a doubt on the ASA 5500-X capabilities and my question is as follows:
Can an ASA 5500-X really support all these featues in the same box?
It appears to me that if for example an ASA 5515-X is needed with IPS functionality, the following hardware will be needed:
and if an ASA 5515-X is needed with Application Visibility and Control (AVC) and Web Security Essentials (WSE), the following will be needed:
Based on the above, I am pretty sure that it is either IPS or AVC/WSE and not both in one box.
Can someone shed some light on this.
Regards,
Alvin
Solved! Go to Solution.
08-12-2014 02:32 PM
Part number L-ASA5512AWI3Y= license will enable Application Visibility and Control (AVC), Web Security Essentials (WSE) and NGFW IPS for 3 years.
You can contact our Technical Assistance Center (TAC) for guidance of the upgrade. To check for the Cisco Technical Assistance Center (TAC) support number per country, please check the link below:
http://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html
You can email tac@cisco.com or open a case (online): https://tools.cisco.com/ServiceRequestTool/scm/mgmt/case
You can also check the following guides:
Cisco ASA 5500-X Hardware Installation Guide - Maintenance and Upgrade Procedures for the ASA 5500-X
http://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5500xguide/5500xhw/asa_procs.html
Cisco ASA CX Module Quick Start Guide
http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/cx/cx_qsg.html
User Guide for ASA CX and Cisco Prime Security Manager 9.1 Installing Software
http://www.cisco.com/c/en/us/td/docs/security/asacx/9-1/user/guide/b_User_Guide_for_ASA_CX_and_PRSM_9_1/b_User_Guide_for_ASA_CX_and_PRSM_9_1_appendix_010000.html
08-13-2014 10:35 AM
Confirming Nilz's advice - your hardware plus the license you mention are what's needed to run all three (AVC, WSE, IPS) on the CX module.
The IPS-on-CX wasn't initially available when this thread was started but was added as a capability ca. December 2013.
If you have specific problems re setup or validating your license after reading the links Nilz provided, I'd recommend opening a new discussion thread for simplicity of following the issue.
08-13-2014 04:09 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide