04-17-2014 09:26 AM
Hi all,
I'm a little bit confused about the licensing, sizing of Cisco Cloud Web Security (CWS).
We have a customer with 2 ASA5505 (unlimited user license) and we would like to order CWS for those two ASA's.
Is it possible to connect two devices with the same CWS account and have the same ruleset set up?
The below link shows me that the ASA5505 can handle max. of 25 CWS named users.
How do I need to understand that? What is the difference between named user and ip address that are going throught the ASA browsing HTTP,HTTPS?
I hope not that only 25 user can be handled concurrend while browsing....
http://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-appliance-asa-software/whitepaper_C11-715169.html
Thanks,
Norbert
Solved! Go to Solution.
04-17-2014 10:21 AM
Hi,
Regarding the deployment, yes this can be accomplished by creating a single company Key on the CWS portal and configuring the same company key for the CWS configuration on both the ASA.
You can check the configuration at http://www.cisco.com/c/en/us/products/collateral/security/cloud-web-security/solution_overview_c07-721174.html
Regarding Sizing the doc clearly mentions "Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet". So it is based on the total number of users who would be using the CWS service through the ASA 5505.
Regards,
Kush
04-17-2014 10:21 AM
Hi,
Regarding the deployment, yes this can be accomplished by creating a single company Key on the CWS portal and configuring the same company key for the CWS configuration on both the ASA.
You can check the configuration at http://www.cisco.com/c/en/us/products/collateral/security/cloud-web-security/solution_overview_c07-721174.html
Regarding Sizing the doc clearly mentions "Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet". So it is based on the total number of users who would be using the CWS service through the ASA 5505.
Regards,
Kush
04-17-2014 11:16 AM
Hi Kush,
Thank you for the fast answer.
So, if the customer has now appr. 50 users through one ASA5505, it needs to get another ASA5505 to handle all 50'ts (each 25), right?
Personally, I thing it's a poor Cisco design and not very scalable.
Kind regards,
Norbert
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide