Deference Between ASA+Firepower and FTD

[amanverma]

i have 5508-X which support both options ASA+Firepower and FTD. before proceeding to use IPS functionality i want to know the deference between both solution and limitations of each solutions ?

We use Remote Access VPN, Site to Site VPN, AAA, as of now with ASA 9.6

[Marvin Rhoads]

FTD is the new unified code image. Of the use cases you mentioned, it has a few limitations with respect to remote access VPN. Those are documented here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-config-guide-v622/firepower_threat_defense_remote_access_vpns.html#reference_xby_dml_wy

It also has a completely different user interface and requires you use a GUI - either the on-box Firepower Device Manager (FDM) or a centralized Firepower Management Center (FMC) server. FDM will introduce some more limitations like no local log archive, inability to configure portchannel interfaces etc. however it is a very nice and easy to use GUI.