02-20-2017 10:11 PM - edited 02-21-2020 09:10 PM
Hi Team,
Kindly advise on the required License if any required to configure Lan to Lan IPsec VPN on ASA5555-FPWR-K9.
Thanks alot
Solved! Go to Solution.
02-20-2017 11:31 PM
LAN to LAN IPsec VPN is included in the base license. No additional licenses are required.
02-20-2017 11:36 PM
You're welcome. Please mark your question as answered if it has been.
02-20-2017 11:31 PM
LAN to LAN IPsec VPN is included in the base license. No additional licenses are required.
02-20-2017 11:33 PM
Hi Marvin,
Thanks a lot.
Regards
02-20-2017 11:36 PM
You're welcome. Please mark your question as answered if it has been.
02-21-2017 12:05 AM
Hi Marvin,
I already did.
But How about Web Filtering ?
02-21-2017 12:37 AM
Web filtering requires that you setup and use the FirePOWER service module. On that module one has several licenses:
Control - required, no cost.
Protect - IPS subscription
URL Filtering
Malware
You can buy any or all of those, depending on what you need to do. We also generally use a FirePOWER Management Center (VM or appliance) to manage the policies and reporting. (You can technically use only ASDM but it is very limited in reporting and cannot store historical data like you can with a dedicated server.)
The URL Filtering license is offered in 1-, 3- and 5-year term. The part number is like:
L-ASA5555-URL= (top level SKU)
L-ASA5555-URL-1Y (one year term license).
02-21-2017 12:49 AM
Hi Marvin,
Thanks a lot for the help but please help me understand.
Do those licenses also apply on the FirePOWER Management Center or just on the Cisco Firewall.
Regards
02-21-2017 01:04 AM
When you buy one of these licenses, you get a PAK. You then redeem the PAK on Cisco's licensing portal to get the license.
The license is applied to the ASA FirePOWER Service Module using either FirePOWER Management Center (FMC) or ASDM, depending on which you are using to manage the FirePOWER Service Module (one or the other but never both). In either case, the license remains on the managing server or PC. It is what allows you to deploy policy on the ASA FirePOWER Service Module that requires the license for the feature to operate.
95% of the time customers are using FMC.
02-21-2017 01:09 AM
Hi Marvin,
That was really helpful.
Thanks a lot for the help.
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide