FirePOWER licenses for ASA5525X HA redundant pair

[Nay-Sayer]

I have a pair of ASA5525Xs setup as HA redundant pair and I would like to deploy FirePOWER AMP, IPS and URL filtering licenses to these devices.  My question is; do I need FirePOWER licenses for each device.  Or, since the devices are setup in HA configuration, will each device share a single FirePOWER license for AMP, IPS and URL filtering?

Thanks.

[Karsten Iwen · Accepted solution]

The Security modules don't share any state or sync anything. They even don't know of each other and operate completely independently. You need two FirePOWER licenses, one for each module and for configuration a FirePOWER management Center. The later can be setup virtually on VMware and there is a quite inexpensive 2 device license for HA-systems like these. Have your ASAs already  an SSD? If not, you also need to order these.