AIP-SSM 10 Signature Update License?

Answered Question
Jun 9th, 2009

Hi every one.we got one AIP-SSM 10 for our asa5520.actually it is bundle asa5520+AIP-SSM10.(part number=ASA5520-AIP10-K9)

1)I want to know that if we want to upgrade our aip-ssm signature we have to get Cisco Services for IPS to download signatures or no with this purt number we get it too!?

2) if not and we need to get Cisco services for IPS separately then where can i find any part number for this services??

3)what about Activation license that should be installed on Sensor?if we get Cisco Services for ips then do we get activation license for instaling on sensor too?or no if no then can we install signatures on a sensor that it hasnt been activated yet?supose that we can get signatures some how!(i know in IDSM-2 we cant install any license untill the license is installed on the sensor.) Thanks

I have this problem too.
0 votes
Correct Answer by marcabal about 7 years 6 months ago

CON-SU1-AS2A10K9 would be the correct contract to put all parts of the bundle under the maintenance contract.

The CON-SU1-ASIP10K9 is what is used when the AIP-SSM-10 is purchased as a spare.

I Do Not Know whether or not this Cisco Service for IPS contract can be used to cover just the AIP-SSM-10 if it was purchased as part of a Bundle instead of a Spare. You would have to ask your reseller or Cisco Sales Representative.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.7 (3 ratings)
Loading.
marcabal Tue, 06/09/2009 - 06:20

I am not sure about the 1 year support.

But whenever you do go and buy a license you will need to buy the Cisco Services for IPS for the specific bundle that was purchased.

The contract will cover the IPS signature license, as well as both hardware and software for the AIP-SSM AND the ASA as well.

If your bundle part number=ASA5520-AIP10-K9, then I am pretty sure you will need:

Product Number Product Description

CON-SU1-AS1A10K9 IPS SVC, AR NBD ASA5510 w/ AIP-SSM-10, 3 FE, 3DES/AES

NOTE: SU1 can be replaced with SU2, SU3, SU4, SUO1, SUO2, SUO3, or SUO4 for higher levels of service.

If you purcahsed it with slightly different bundle part numbers (that may have included other licenses), then you need one of these other part numbers instead:

CON-SU1-AS1A10K8 IPS SVC, AR NBD ASA5510-AIP10-K8

CON-SU1-AS1A1PK9 IPS SVC, AR NBD ASA5510-AIP10SP-K9

CON-SU1-AS1A1PK8 IPS SVC, AR NBD ASA5510-AIP10SP-K8

If you purchased from a reseller, then it is possible that your reseller may have different contract part numbers, and you would need to contact your reseller.

blackhat2020 Tue, 06/09/2009 - 08:31

Thanks Marcabal.I have one Question.You said that we will need CON-SU1-AS1A10K9 for our bundle if our bundle is ASA5520-AIP10-K9 and our bundle it is but in the license description it is for ASA5510 not 5520 and i found this product number for asa5520 --->CON-SU1-AS2A10K9 .is this correct one for our bundle?and if it is the correct one,then do we need to tell our reseller that this product number(ips services) is for our asa bundle and then he should include asa serial number with licese contract?or no this license ordering is completly independent from ASA's boundle or serial number?Thanks

marcabal Tue, 06/09/2009 - 12:30

OOPS, mistake on my part.

I misread your post (even when I copied the part number). I guess I need new glasses.

Yes CON-SU1-AS2A10K9 you found would be the correct one.

Your reseller should either sell you this Cisco Service for IPS contract OR your reseller may provide their own support contracts..

Both the ASA serial number AND the AIP-SSM serial number will need to be attached to the service contract.

Farrukh Haroon Wed, 06/10/2009 - 06:21

You did not believe what I told you? At least go and check online, you will find that one year support is included with the ASA+IPS bundles. If you have extra money to spend, then thats ok :)

This is a pre-sales quote generated using Cisco's pre-sales Dynamic Configurator :)

Product Description Quantity Discount Price Lead Time

ASA5520-AIP20-K9 ASA 5520 Appliance w/ AIP-SSM-20, SW, HA, 4GE+1FE, 3DES/AES 1 0.00 15,995.00 14 Days

CAB-AC Power Cord,110V 1 0.00 0.00 14 Days

SF-ASA-8.0-K8 ASA 5500 Series Software v8.0 1 0.00 0.00 14 Days

ASA5500-SSL-25 ASA 5500 SSL VPN 25 User License 1 0.00 3,095.00 14 Days

ASA5520-VPN-PL ASA 5520 VPN Plus 750 Peer License 1 0.00 0.00 14 Days

ASA5500-ENCR-K9 ASA 5500 Strong Encryption License (3DES/AES) 1 0.00 0.00 14 Days

ASA-AIP-20-INC-K9 ASA 5500 AIP Security Services Module-20 included w/ bundles1 0.00 0.00 14 Days

SF-ASA-AIP-6.0-K9 ASA 5500 Series AIP Sofware 6.0 for Security Service Modules1 0.00 0.00 14 Days

ASA-VPN-CLNT-K9 Cisco VPN Client Software (Windows, Solaris, Linux, Mac) 1 0.00 0.00 14 Days

ASA-180W-PWR-AC ASA 180W AC Power Supply 1 0.00 0.00 14 Days

ASA-ANYCONN-CSD-K9 ASA 5500 AnyConnect Client + Cisco Security Desktop Software1 0.00 0.00 14 Days

CON-SUO3-ASAINC20 IPS SVC,ONSITE24X7X4 AIP SSM-20 included in ASA systems 1 0.00 0.00

CON-SUO3-AS2A20K9 IPS SVC,ONSITE24X7X4 ASA5520 w AIP-SSM-20, 4GE+1FE, 3DES/AES1 0.00 4,599.00

Notice the penultimate line? :)

Regards

Farrukh

rhermes Tue, 06/09/2009 - 08:14

Not have a valid license installed will not prevent your sensor from working. It will still perform all the IDS/IPS functions. You can also upgrade the OS with a license and each upgrade come with the most current signature set. Not having a license prevents you form loading signature updates. Often new signatures are refined or tuned after being released, so sig updates are nice if you are really watching what sigs hit and performing analysis on attacks.

blackhat2020 Tue, 06/09/2009 - 08:43

Thanks Marcabal.I have one Question.You said that we will need CON-SU1-AS1A10K9 for our bundle if our bundle is ASA5520-AIP10-K9 and our bundle it is but in the license description it is for ASA5510 not 5520 and i found this product number for asa5520 --->CON-SU1-AS2A10K9 .is this correct one for our bundle?and if it is the correct one,then do we need to tell our reseller that this product number(ips services) is for our asa bundle and then he should include asa serial number with licese contract?or no this license ordering is completly independent from ASA's boundle or serial number?Thanks

something else.i also found this partnumber CON-SU1-ASIP10K9.is this only for AIP-SSM10 and not for ASA5520?can i order this partnumber for my bundle?thanks

Correct Answer
marcabal Tue, 06/09/2009 - 12:34

CON-SU1-AS2A10K9 would be the correct contract to put all parts of the bundle under the maintenance contract.

The CON-SU1-ASIP10K9 is what is used when the AIP-SSM-10 is purchased as a spare.

I Do Not Know whether or not this Cisco Service for IPS contract can be used to cover just the AIP-SSM-10 if it was purchased as part of a Bundle instead of a Spare. You would have to ask your reseller or Cisco Sales Representative.

Actions

This Discussion