ASA licensing question !!!

Answered Question
Feb 18th, 2008

Hi Netpros,

Wanting to configured two ASA on failover A/S with IPS module each. In regards to licensing. What would be the best bundle for me to get. I mean I know with PIxes you can have one with UR license and the other one with FO only. Is there something similar to that for ASAs. your expert comment are much appreciated.

I have this problem too.
0 votes
Correct Answer by andrew.burns about 8 years 9 months ago

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
andrew.burns Tue, 02/19/2008 - 02:04

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

Fernando_Meza Tue, 02/19/2008 - 15:57

Hi Andrew,

Thanks for your reply. I was actually going down the same path. Great to know I was on the same track.

Cheers,

Actions

This Discussion