Cisco ASA5512X & ASA5515X NGFW - AVC & WSE

[Paul Mark Valenzuela]

Hi,

We are looking to acquire ASA5512-SSD120-K9 or ASA5515-SSD120-K9 to control Websites access & control applications.

Question

1. Can these models support AVC & WSE at the same time on a single ASA NGFW ?

Are there anything else to acquire to enable this feature on ASA5512 or ASA5515 ?

2. What are the recommended number of users for these models ?

3. We need to be able to control user access to website & applications.

Are the AVC & WSE subscription needed ?

4. I need to enable IPSEC 250 user vpn, what license do I need ? AnyConnect IPSEC VPN is EOL.

Thanks,

Paul

[Boris Uskov]

Hello, Paul.

1. AVC and WSE licenses are under End-of-Sale (CX/PRSM):

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/eos-eol-notice-c51-733917.html

I advice you to look at new FirePOWER module for your purposes.

http://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html

2. In documentation there is no info about recommened number of users. But you can compare models on their performance, maximum concurent connections and so on. This link may help you:

http://www.cisco.com/c/en/us/products/security/asa-firepower-services/models-comparison.html

3. User's control is supported by FirePOWER module. It was also supported by CX module (AVC and WSE licenses), but it is EoS now.

4. The licensing schema for AnyConnect was changed in 2015 year. Please, see the actual ordering guide for AnyConnect:

http://www.cisco.com/c/dam/en/us/products/security/anyconnect-og.pdf