Solved: No, you would just apply the

scottharrah · ‎01-25-2016

Implementing an ASA5506-BUN with the 3 year license L-ASA5506-TAMC-
3Y.

Would I need additional licenses for AMP on each PC?

Thanks!

Marvin Rhoads · ‎10-23-2016

Your license includes AMP for Networks allowing you to inspect files as they pass through the ASA (if you setup a File Policy).

There is a separate product - AMP for Endpoints - that allows you to inspect file behavior on the endpoints themselves (PC, Mac, Linux or Android). That is licensed per endpoint.

Both provide file protection although I would argue that the endpoint product make more sense as it will see all files no matter how they came to be on the PC (network download via https, USB drive, internal infection from another PC etc. are a few that would not be seen by a perimeter firewall).

View solution in original post

vgulinolite · ‎10-21-2016

No, you would just apply the license to the module, then create your service policy rule for each vlan you want to direct traffic to the module for.

Marvin Rhoads · ‎10-23-2016

Your license includes AMP for Networks allowing you to inspect files as they pass through the ASA (if you setup a File Policy).

There is a separate product - AMP for Endpoints - that allows you to inspect file behavior on the endpoints themselves (PC, Mac, Linux or Android). That is licensed per endpoint.

Both provide file protection although I would argue that the endpoint product make more sense as it will see all files no matter how they came to be on the PC (network download via https, USB drive, internal infection from another PC etc. are a few that would not be seen by a perimeter firewall).

ASA 5506 with FirePower