11-19-2024 11:48 AM
Hello. We have an FPR-1120 with ASA image 9.16(2)3. We have a Smartnet agreement with it. Is there a way to enable geo IP filtering on this image? I know it requires downloading a database with the IPs in it. Is there a subscription that can be obtained, or that is included with Smartnet, that would allow me to enable Geo IP filtering and automatically download and update that IP database, or does the firewall have to be re-imaged with a firepower image? Would like to avoid that if possible as I'm quite familiar with the ASA software. But if it does come to that, is that something that can be done, or is the hardware specific to the ASA image? If it can be done would access to the Firepower image be covered in our Smartnet agreement?
11-19-2024 11:53 AM
@Keegan Santos no, the ASA image does not support Geolocation filtering. You would need to reimage to use FTD software image to get Geolocation. You get this functionality with the essentials/base license (free), so no additional cost. https://secure.cisco.com/secure-firewall/v7.4/docs/smart-licensing
11-19-2024 11:56 AM
Thanks. Is access to the FTD image free? Or at least covered by the existing Smartnet agreement for the device?
11-19-2024 11:58 AM
@Keegan Santos if you have a valid smartnet contract, then yes you can download the FTD image.
Reimage guide - https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide