Cisco ASA5515-X with IPS module and CX module but not IPS software but I need IPS

[juan-ruiz]

I normally configure the IPS module on a ASA no problem and its pretty standard setup but I came across a Cisco ASA 5515-X 9.1 code running two modules a Cisco IPS without a software image and a Cisco CX not configured with 9.1.

Do I need to configure the CX for anything or can I just download the IPS software module code and install it and be off and running configuring the IPS module as normal?

Since this ASA is running the software IPS which is the correct software to use on this ASA?

Can someone please provide me a link?

Thanks,

JC

[Marvin Rhoads]

Duplicate post. Answered here.

[mwenstro]

You can configure just the ASA IPS module and ignore CX.

Or you could configure AVC and IPS in CX: http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/cx/cx_qsg.html#pgfId-49450

Of course you need a NGFW subscription to get AVC and IPS signature updates.

Or you can install the ASA with FirePOWER Services software module to the SSD drive, and update the ASA software to 9.2.2.4. Then you get ASA + FirePOWER services.

See: http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

Requires ASA FireSIGHT Management Console. You can download FS MC virtual machine and try it for 60 days. If you have a Smartnet contract.