Ordering Cisco ASA

[fabflorent]

Hi,

I have already ordered a new Cisco ASA5515-K9. But now I am planning to use AMP (Advanced Malware Protection), IPS (Intrusion Prevention System) and URL filtering. Please, can someone tell me what I need to add to my ASA?

[Pranay Prasoon]

All these features are available with firepower module on ASA.

Firepower installation

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

Then you will need license for different features:-

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118396-technote-firesight-00.html

[fabflorent]

Thank you for the answer.

please, is there a performance difference between an ordered ASA5515-FRPW-K9 and the ASA5515-K9 later associated with SFR Module?

[Pranay Prasoon]

Not really. The only difference would be that you would not get the firepower pre-installed and PAK associated with it. You will have to contact again with your reseller regarding PAK and firepower licenses. Also ASA5515 will need the SSD installed. 

[Oliver Kaiser]

Just keep in mind that your performance will decrease if you are using ips, amp and url filtering on your asa.