Unable to install CX module on 5512-X

[sossie]

Hi all,

I have a 5512-X. It was not initially ordered with the CX module.

I was led to believe that the 5512 and 5515 models can now install the CX module in software and don't need the SSD drive?

The reason I believe this is to be the case is that I have a new 5515 that seems to have the CX module running (trial license) and this is on an ASA the was not ordered with CX (and I don't think it was ordered with the SSD drives).

So I've gone through the steps to install CX on our lab 5512 and I get this error:

FIREWALL# sw-module module cxsc recover boot

Storage device not found.  Install drive and try again.

Anyone help with this?

Simon.

[Vibhor Amrodia · Accepted solution]

Hi,

This is because you don't have the SSD installed on the ASA device. It will not work without it and you would need to order it from Cisco:- ASA5500X-SSD120= part number.

If you have an SSD installed , verify it using "show inventory"

Thanks and Regards,

Vibhor Amrodia

[Marvin Rhoads · Accepted solution]

Vibhor is correct - the SSD is required for CX (and for SFR module).

Unless you have a specific reason for looking into the CX, customers are encouraged to consider the FirePOWER Services module (sfr) for new installations. 

[sossie]

Thanks Marvin, you are correct - no ssd in the 5512.

I haven't heard about FirePOWER. What is it used for?

The reason I was interested in CX was to test it as a outbound web browsing security proxy.

We have trailed the Cisco Web Security Appliance (as a virtual appliance) and want to compare.

Thanks for you help.

Simon

[Marvin Rhoads]

FirePOWER is the branding Cisco is using to denote the products that have had technology from the 2013 Sourcefire acquisition integrated into them.

ASA with FirePOWER services was just announced in September 2014 and is being promoted in advance of the older solutions that use the CX module. CX is still being sold but is not being significantly enhanced going forward.

For a pure web filtering service, the WSA product line will have the most mature solution. FirePOWER offers more defense in depth, especially when you look the the IPS and Advanced Malware Protection (AMP) services it offers in addition to web filtering.