In order to enable the Content Aware feature set on the ASA, you would need to purchase a seperate license.
To get information about the features and the licensing information for the ASA-CX architecture, you can go to
For assistance on pre-production issues, you can open a case at http://www.cisco.com/web/partners/tools/pdihd.html
Cisco PDI Help Desk
In addition to the license (you can get a free 90-day trial license from Cisco), you'll need a SSD drive in your ASA to use the CX functionality.
Sent from Cisco Technical Support iPad App
To answer the title question, ASA CX is basically culmination of Cisco integrating IronPort Web Security fully into it's product line. One no longer needs a separate appliance to get 'next-gen' firewall features such as URL filtering/application control or antivirus filtering.
You can also manage one or many of these devices Prime Security Manager (PRSM, pronounced "prism"; an unfortunate name given recent news stories).
Basically: ASA CX is the IronPort WSA being merged into the security appliances.
I just installed it this weekend. I loved IP WSA, and I love this product as well.
Sent from Cisco Technical Support Android App