cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
437
Views
0
Helpful
3
Replies

ASA licensing question !!!

Fernando_Meza
Level 7
Level 7

Hi Netpros,

Wanting to configured two ASA on failover A/S with IPS module each. In regards to licensing. What would be the best bundle for me to get. I mean I know with PIxes you can have one with UR license and the other one with FO only. Is there something similar to that for ASAs. your expert comment are much appreciated.

1 Accepted Solution

Accepted Solutions

andrew.burns
Level 7
Level 7

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

View solution in original post

3 Replies 3

abinjola
Cisco Employee
Cisco Employee

There is no concept of UR/R/FO license on ASA unlike Pix

Nobody can suggest you what would be the best bundle for you, however check this link and based on your requirement pick your license.

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html

andrew.burns
Level 7
Level 7

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

Hi Andrew,

Thanks for your reply. I was actually going down the same path. Great to know I was on the same track.

Cheers,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card