Has FPR1120 supported ASA yet?

[CSCO13058904]

Hi, 

According to the following link https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html, it states that for FPR1000 Series "Support for Cisco® Adaptive Security Appliance (ASA) Firewall will be added in a later release."

Can someone tell me whether FPR1120 model can now run ASA or not, or when it will support ASA?

Have a nice day.

Best Regards,

Thank you.

[Marvin Rhoads]

It will be supported when ASA software 9.13 is released.

We currently expect that to be next month (October 2019).

[giovanni.augusto]

Hi Marvin

Will it support ASA+Firepower Services ?

Or will it support ASA and FTD images exclusively ?

Thanks in advance!

[Marvin Rhoads]

When any Firepower series appliance runs an ASA image it is without Firepower services.

That applies whether it is 1100, 2100, 4100 or 9300 series.

If you need NGFW features then the FTD image is the way to go.

[CSCO13058904]

Thank you so much for the information.
It is of a great help.

[dankennedy]

9.13.1 is now available and does support ASA for the Firepower 1120, 1140, and 1150.

For ordering new devices when the customer want's to use ASA on a 1140 for example, what is the partcode for this?

[Marvin Rhoads]

The Cisco ordering tool hasn't been updated just yet (as of today 17 October 2019) to allow us to specify ASA image.

For now you would have to order FPR1140-NGFW-K9 or FPR1140-BUN without any subscriptions and then reimage the device with ASA software during staging.

[dankennedy]

Ok that would be fine, but I also need context licences, any idea what the part number would be?

[Marvin Rhoads]

Good question @dankennedy 

It looks like L-FPR1K-ASASC-5= and L-FPR1K-ASASC-10= are the SKUs for 5- and 10-context licenses respectively.

Ordering for Firepower 1000 series with ASA image preloaded are not yet loaded in CCW. I would expect them in the coming weeks since the supporting ASA software 9.13(1) was released on 26 September.

[dankennedy]

Great, thanks.

[garry cordess]

Hi,

On CCW with FPR1120-NGFW-K9 no Security Context Licenses such as FPR1K-ASASC-5 / L-FPR1K-ASASC-10 are listed as options.

On the FPR1120-ASA-K9 feature licenses i.e. FPR1K-ASASC-5 (not the 10) is listed.

So the TD code does not support Security Context Licenses?

ASA code does, as it always has?

Is that correct?

Kind regards,

Garry.

[Marvin Rhoads]

Security Contexts are a feature only available with ASA image devices. The 1120 only offers 2 included or 5 optional licenses maximum. See Table 2 here: https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

Threat Defense image does not have the concept of security contexts. The closest feature is multi-instance which is only available on the 3100 series and higher since it actually is completely virtual firewall instances running as containers with dedicated hardware resources (CPU and memory).

[novanetinc]

Hello,

Do we need any special license on 1120 to use failover and VPN feature on ASA image? Our model is FPR1120-ASA-K9.

Thanks,

ST