cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
796
Views
0
Helpful
8
Replies

Licensing Requirements to enable LAN TO LAN VPN IPSEC ON ASA5555-FPWR-K9

tonyk0001
Level 1
Level 1

Hi Team,

Kindly advise on the required License if any required to configure Lan to Lan IPsec VPN on ASA5555-FPWR-K9.

Thanks alot

2 Accepted Solutions

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

LAN to LAN IPsec VPN is included in the base license. No additional licenses are required.

View solution in original post

You're welcome. Please mark your question as answered if it has been.

View solution in original post

8 Replies 8

Marvin Rhoads
Hall of Fame
Hall of Fame

LAN to LAN IPsec VPN is included in the base license. No additional licenses are required.

Hi Marvin,

Thanks a lot.

Regards

You're welcome. Please mark your question as answered if it has been.

Hi Marvin,

I already did.

But How about Web Filtering ?

Web filtering requires that you setup and use the FirePOWER service module. On that module one has several licenses:

Control - required, no cost. 

Protect - IPS subscription

URL Filtering

Malware

You can buy any or all of those, depending on what you need to do. We also generally use a FirePOWER Management Center (VM or appliance) to manage the policies and reporting. (You can technically use only ASDM but it is very limited in reporting and cannot store historical data like you can with a dedicated server.) 

The URL Filtering license is offered in 1-, 3- and 5-year term. The part number is like:

L-ASA5555-URL= (top level SKU)

L-ASA5555-URL-1Y (one year term license).

Hi Marvin,

Thanks a lot for the help but please help me understand.

Do those licenses also apply on the FirePOWER Management Center or just on the Cisco Firewall.

Regards

When you buy one of these licenses, you get a PAK. You then redeem the PAK on Cisco's licensing portal to get the license.

The license is applied to the ASA FirePOWER Service Module using either FirePOWER Management Center (FMC) or ASDM, depending on which you are using to manage the FirePOWER Service Module (one or the other but never both). In either case, the license remains on the managing server or PC. It is what allows you to deploy policy on the ASA FirePOWER Service Module that requires the license for the feature to operate.

95% of the time customers are using FMC.

Hi Marvin,

That was really helpful.

Thanks a lot for the help.

Regards