10-30-2012 04:47 AM - edited 03-11-2019 05:16 PM
Hello.
I have this box.
I have few questions about it.
1) Will I be able to update firmware (from 8.2 to 8.3 or higher for example) without smarnet for ASA 5510? And what can not I do without smartnet?
2) I have only AIP-SSM-10 module to this asa 5510. is there a smartnet for it, too? And when I buy only module is there build in a 1 year subscription for IPS signatures?
3) If I have Cisco ASA 5510 base license, will my IPS on AIP-SSM-10 work?
4) Also I'm planning in a year buy one more 5510 with same module and put ther in failover. Will I realy need Security Plus licence for failover (Active/Standby)? For Active/Active I know that I need one, yes?
Please help me.
Solved! Go to Solution.
10-31-2012 01:05 AM
1) You would need Smartnet to be able to download software from cisco.com download site.
2) Yes, there is also smartnet for the AIP module.AIP module doesn't come with 1 year subscription but you can request for demo license.
3) Yes, base license is OK for the AIP module.
4) Yes, you would need Security Plus license on both ASA to be able to run any type of failover on ASA5510.
Hope that answers your questions.
10-31-2012 01:49 PM
Hi Victor,
Yes, you are absolutely correct in regards to the Cisco Services for IPS, it provies all that you have mentioned above. And yes, it is for 1 year.
11-01-2012 02:13 AM
Cheers, no problem.
Pls kindly mark your post as answered so others can learn from it. Thank you.
10-31-2012 01:05 AM
1) You would need Smartnet to be able to download software from cisco.com download site.
2) Yes, there is also smartnet for the AIP module.AIP module doesn't come with 1 year subscription but you can request for demo license.
3) Yes, base license is OK for the AIP module.
4) Yes, you would need Security Plus license on both ASA to be able to run any type of failover on ASA5510.
Hope that answers your questions.
10-31-2012 07:53 AM
Thanks.
Your answers are ones I was looking for.
about the second question.
I have read that I need a smartnet for AIP-SSM to have ability to get regular update of signature for IPS and its operation system.
For my situation, I found, it is - CON-SU1-ASIP10K9.
It is not a smartnet but something other "Cisco Services for IPS" which provides updates and upgrades to Cisco IOS software, Intrusion Protection Signature updates, 24 x 7 x 365 access to TAC, and, subject to fault identification by Cisco, replacement hardware delivered by the next business day.
And this CON-SU1-ASIP10K9 is only given for one year, isn't it?
Is it all right about all I have written?
10-31-2012 01:49 PM
Hi Victor,
Yes, you are absolutely correct in regards to the Cisco Services for IPS, it provies all that you have mentioned above. And yes, it is for 1 year.
11-01-2012 02:08 AM
Oh... Yes.
Thanks again.
11-01-2012 02:13 AM
Cheers, no problem.
Pls kindly mark your post as answered so others can learn from it. Thank you.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide