10-23-2014 03:46 PM - edited 03-10-2019 06:16 AM
I purchased 4 Cisco ASA5515x with IPS subscription.
Firewalls show that IPS is disabled when I do show version.
I do have subscription license file I got from cisco but how to I activate IPS on my new firewall?
Should I have been given activation keys for that?
10-23-2014 04:00 PM
Hi James,
If you have got L-ASA5515-TA-LIC= PID as part of subscription then this PID will provide only legal entitlement to obtain signature updates for PROTECT+CONTROL.
You will need to buy ASA5515-CTRL-LIC= PID for the sensor to obtain the license for "PROTECT+CONTROL"
Please reach out the GLO team to obtain help on the CTRL LIC PID
DD
10-25-2014 07:44 AM
the answer varies according to which IPS type you purchased. There are three distinct types currently offered:
1. Classic IPS (dedicated software module)
2. NGFW IPS service (runs on CX module)
3. Firepower IPS (runs on Firepower module)
#3 is the use case for which DD replied. Any Firepower services require the license to be applied on the Firesight manager (separate product running on appliance or as a VM).
#2 requires the license to be activated in Prime Security Manager (PRSM) GUI. PRSM runs either on the ASA itself or as a separate VM (in what is known as "off-box" or multi-device mode).
#1 requires setup of the IPS module with ability to reach Internet. The license is automatically registered associated with your product serial number.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide