cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1621
Views
10
Helpful
2
Replies

how to activate IPS on asa5515x

jerry100
Level 1
Level 1

I purchased 4 Cisco ASA5515x with IPS subscription.

Firewalls show that IPS is disabled when I do show version.

I do have subscription license file I got from cisco but how to I activate IPS on my new firewall?

Should I have been given activation keys for that?

 

2 Replies 2

dhvenkat
Cisco Employee
Cisco Employee

Hi James,

If you have got L-ASA5515-TA-LIC= PID as part of subscription then this PID will provide only legal entitlement to obtain signature updates for PROTECT+CONTROL.

You will need to buy ASA5515-CTRL-LIC= PID for the sensor to obtain the license for "PROTECT+CONTROL"

Please reach out the GLO team to obtain help on the CTRL LIC PID

 

DD

Marvin Rhoads
Hall of Fame
Hall of Fame

the answer varies according to which IPS type you purchased. There are three distinct types currently offered:

1. Classic IPS (dedicated software module)

2. NGFW IPS service (runs on CX module)

3. Firepower IPS (runs on Firepower module)

#3 is the use case for which DD replied. Any Firepower services require the license to be applied on the Firesight manager (separate product running on appliance or as a VM).

#2 requires the license to be activated in Prime Security Manager (PRSM) GUI. PRSM runs either on the ASA itself or as a separate VM (in what is known as "off-box" or multi-device mode).

#1 requires setup of the IPS module with ability to reach Internet. The license is automatically registered associated with your product serial number.

Review Cisco Networking for a $25 gift card