02-13-2015 07:30 AM - edited 03-10-2019 06:19 AM
Hi Team,
I am new to IPS and we have purched the device ASA5585-SSP-40 along with IPS module
od Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5585-X Security Services Processor-40 w ASA5585-SSP-40 JAD17300013
1 ASA 5585-X IPS Security Services Processor-4 ASA5585-SSP-IPS40 JAD1728028W
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 7c69.f682.95dc to 7c69.f682.95e7 2.2 2.0(13)5 9.2(1)
1 bc16.6581.e4b0 to bc16.6581.e4bb 2.1 2.0(13)5 7.1(1)E4
Mod SSP Application Name Status SSP Application Version
---- ------------------------------ ---------------- --------------------------
1 IPS Up 7.1(1)E4
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
1 Up Up
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10000 perpetual
Total VPN Peers : 10000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Enabled perpetual
Cluster : Disabled perpetual
This platform has an ASA5585-SSP-40 VPN Premium license.
I wanted to check that Is IPS licese is aviable on the devcie or do we need to purchse seperatley
Solved! Go to Solution.
02-19-2015 05:42 AM
You're welcome. Please mark your question as answered if it has been and rate useful answers.
02-13-2015 03:48 PM
You have the IPS SSP so that covers the base functionality.
Cisco IPS also requires a subscription license for your signature updates. That's tied to your Smartnet service support contract.
The easiest way to tell if that is current that from the device is to do the basic IPS configuration and then it will contact cisco.com to update itself using its built-in serial number as its ID. If the subscription is current, it will download the latest signatures and you will be able to see via the IDM (IPS Device Manager) or IME (IPS Manager Express or CSM (Cisco Security Manager) (whichever you are using) the current subscription status.
You could also contact Cisco TAC and open a case to have it checked.
02-19-2015 12:32 AM
Thank you for the information.
02-19-2015 05:42 AM
You're welcome. Please mark your question as answered if it has been and rate useful answers.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide