cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
330
Views
2
Helpful
3
Replies

Geo IP Filtering FPR-1120 With ASA Image

Keegan Santos
Level 1
Level 1

Hello.  We have an FPR-1120 with ASA image 9.16(2)3.  We have a Smartnet agreement with it.  Is there a way to enable geo IP filtering on this image?  I know it requires downloading a database with the IPs in it.  Is there a subscription that can be obtained, or that is included with Smartnet, that would allow me to enable Geo IP filtering and automatically download and update that IP database, or does the firewall have to be re-imaged with a firepower image?  Would like to avoid that if possible as I'm quite familiar with the ASA software.  But if it does come to that, is that something that can be done, or is the hardware specific to the ASA image?  If it can be done would access to the Firepower image be covered in our Smartnet agreement?

3 Replies 3

@Keegan Santos no, the ASA image does not support Geolocation filtering. You would need to reimage to use FTD software image to get Geolocation. You get this functionality with the essentials/base license (free), so no additional cost. https://secure.cisco.com/secure-firewall/v7.4/docs/smart-licensing

 

Thanks.  Is access to the FTD image free?  Or at least covered by the existing Smartnet agreement for the device?

@Keegan Santos if you have a valid smartnet contract, then yes you can download the FTD image.

Reimage guide - https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

 

Review Cisco Networking for a $25 gift card