Licensing Requirements to enable LAN TO LAN VPN IPSEC ON ASA5555-FPWR-K9

[tonyk0001]

Hi Team,

Kindly advise on the required License if any required to configure Lan to Lan IPsec VPN on ASA5555-FPWR-K9.

Thanks alot

[Marvin Rhoads · Accepted solution]

LAN to LAN IPsec VPN is included in the base license. No additional licenses are required.

[tonyk0001]

Hi Marvin,

Thanks a lot.

Regards

[Marvin Rhoads · Accepted solution]

You're welcome. Please mark your question as answered if it has been.

[tonyk0001]

Hi Marvin,

I already did.

But How about Web Filtering ?

[Marvin Rhoads]

Web filtering requires that you setup and use the FirePOWER service module. On that module one has several licenses:

Control - required, no cost. 

Protect - IPS subscription

URL Filtering

Malware

You can buy any or all of those, depending on what you need to do. We also generally use a FirePOWER Management Center (VM or appliance) to manage the policies and reporting. (You can technically use only ASDM but it is very limited in reporting and cannot store historical data like you can with a dedicated server.) 

The URL Filtering license is offered in 1-, 3- and 5-year term. The part number is like:

L-ASA5555-URL= (top level SKU)

L-ASA5555-URL-1Y (one year term license).

[tonyk0001]

Hi Marvin,

Thanks a lot for the help but please help me understand.

Do those licenses also apply on the FirePOWER Management Center or just on the Cisco Firewall.

Regards

[Marvin Rhoads]

When you buy one of these licenses, you get a PAK. You then redeem the PAK on Cisco's licensing portal to get the license.

The license is applied to the ASA FirePOWER Service Module using either FirePOWER Management Center (FMC) or ASDM, depending on which you are using to manage the FirePOWER Service Module (one or the other but never both). In either case, the license remains on the managing server or PC. It is what allows you to deploy policy on the ASA FirePOWER Service Module that requires the license for the feature to operate.

95% of the time customers are using FMC.

[tonyk0001]

Hi Marvin,

That was really helpful.

Thanks a lot for the help.

Regards