Cisco ASA5506-SEC-BUN-K9 ASA5506-X with FirePOWER . Does it support Netflow ?

[Haider Malik]

Hello

i wanted to buy this ASA 

Cisco ASA5506-SEC-BUN-K9
ASA5506-X with FirePOWER Services
ASA 9.6(1), ASDM 7.6(1)

Is this model support for Netflow ? 

Can anyone confirm that for me before i buy that ? 

Kind Regards

Usman 

[Marvin Rhoads · Accepted solution]

Yes the ASA 5506 supports Netflow monitoring and exporting.

Its output format is NSEL which most Netflow collectors can parse. (Ironically, Cisco Prime Infrastructure cannot.) I have used ASAs to eport Netflow to both SolarWinds NPM and Paessler PRTG without any problems.

[Haider Malik]

Thank you Sir  that i just wanted to confirm as i use to have 5505 and Netflow was available there. 

:) 

[Marvin Rhoads]

You're welcome.

Note that if you intend to use the FirePOWER services module it requires separate licensing. You choose IPS, URL Filtering and/or Malware protection in 1-, 3- or 5-year term.

[Haider Malik]

This is what i have

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 30             perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Standby perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
Carrier                           : Disabled       perpetual
AnyConnect Premium Peers          : 50             perpetual
AnyConnect Essentials             : 50             perpetual
Other VPN Peers                   : 50             perpetual
Total VPN Peers                   : 50             perpetual
AnyConnect for Mobile             : Enabled        perpetual
AnyConnect for Cisco VPN Phone    : Enabled        perpetual
Advanced Endpoint Assessment      : Enabled        perpetual
Shared License                    : Enabled        perpetual
Total UC Proxy Sessions           : 160            perpetual
Botnet Traffic Filter             : Enabled        perpetual
Cluster                           : Disabled       perpetual

This platform has an ASA 5506 Security Plus license.

[Marvin Rhoads]

That's all good but FirePOWER licenses won't show up there.

They are applied to the FirePOWER service module from ASDM (or FirePOWER Management Center when they are part of an enterprise deployment) after you have done the initial setup.

See the Quick Start Guide for details on that:

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html