Cisco ASA 5512X Firesight Licensing

[carlucciosuk]

We have a Cisco ASA5512 along with the Sourcefire License

The ASA CX IPS you use to be able to log on directly using HTTPS to the management address but by the looks of this you have to use the firesight management.

What licenses do I need to be able to manage a single ASA 5512 with sourcefire ?

[dhvenkat]

Hi,

This is more a product question, we recommend to get in touch with your Sales Contact. They can be more helpful.

[Aglaia Pitsillidou]

Hello,

Kindly provide information to the user who posted this question so that everyone on the community can benefit.

Saying that this is a sales related question does not help anyone on the community. We might have to remove posts like these from the discussion forums.

Thank you for your understanding!

Litsa

Cisco Support Community Team

[Marvin Rhoads]

You are correct - a FireSIGHT Management Center (FMC) is required to configure and manage policies on an ASA 5512-X with FirePOWER service module. There's not an "on-box" option like there is with CX modules and PRSM. In fact, the module license needs to be applied from FMC.

All ASAs with FirePOWER service modules need:

a. the no-cost Control license, bound together with:

b. a feature license with some combination of IPS, URL Filtering and/or Advanced Malware Protection (AMP).

Then you need a separate FMC running on either a VM or, for larger installation with many managed modules, on a dedicated hardware appliance. The FMC is licensed apart from the ASA module(s). For a simple installation such as yours, there's a special license for up to 2 managed modules. It's has special pricing to lower to barrier to entry for smaller shops that are just getting into the FirePOWER-based products.