06-09-2009 04:23 AM - edited 03-10-2019 04:39 AM
Hi every one.we got one AIP-SSM 10 for our asa5520.actually it is bundle asa5520+AIP-SSM10.(part number=ASA5520-AIP10-K9)
1)I want to know that if we want to upgrade our aip-ssm signature we have to get Cisco Services for IPS to download signatures or no with this purt number we get it too!?
2) if not and we need to get Cisco services for IPS separately then where can i find any part number for this services??
3)what about Activation license that should be installed on Sensor?if we get Cisco Services for ips then do we get activation license for instaling on sensor too?or no if no then can we install signatures on a sensor that it hasnt been activated yet?supose that we can get signatures some how!(i know in IDSM-2 we cant install any license untill the license is installed on the sensor.) Thanks
Solved! Go to Solution.
06-09-2009 12:34 PM
CON-SU1-AS2A10K9 would be the correct contract to put all parts of the bundle under the maintenance contract.
The CON-SU1-ASIP10K9 is what is used when the AIP-SSM-10 is purchased as a spare.
I Do Not Know whether or not this Cisco Service for IPS contract can be used to cover just the AIP-SSM-10 if it was purchased as part of a Bundle instead of a Spare. You would have to ask your reseller or Cisco Sales Representative.
06-09-2009 06:07 AM
If I remember correctly, one year support is included with the bundle, just go to the following link and select the AIP-SSM Module (Cisco Services for IPS), then put your serial number/contact details on the next page.
https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y
Regards
Farrukh
06-09-2009 06:20 AM
I am not sure about the 1 year support.
But whenever you do go and buy a license you will need to buy the Cisco Services for IPS for the specific bundle that was purchased.
The contract will cover the IPS signature license, as well as both hardware and software for the AIP-SSM AND the ASA as well.
If your bundle part number=ASA5520-AIP10-K9, then I am pretty sure you will need:
Product Number Product Description
CON-SU1-AS1A10K9 IPS SVC, AR NBD ASA5510 w/ AIP-SSM-10, 3 FE, 3DES/AES
NOTE: SU1 can be replaced with SU2, SU3, SU4, SUO1, SUO2, SUO3, or SUO4 for higher levels of service.
If you purcahsed it with slightly different bundle part numbers (that may have included other licenses), then you need one of these other part numbers instead:
CON-SU1-AS1A10K8 IPS SVC, AR NBD ASA5510-AIP10-K8
CON-SU1-AS1A1PK9 IPS SVC, AR NBD ASA5510-AIP10SP-K9
CON-SU1-AS1A1PK8 IPS SVC, AR NBD ASA5510-AIP10SP-K8
If you purchased from a reseller, then it is possible that your reseller may have different contract part numbers, and you would need to contact your reseller.
06-09-2009 08:31 AM
Thanks Marcabal.I have one Question.You said that we will need CON-SU1-AS1A10K9 for our bundle if our bundle is ASA5520-AIP10-K9 and our bundle it is but in the license description it is for ASA5510 not 5520 and i found this product number for asa5520 --->CON-SU1-AS2A10K9 .is this correct one for our bundle?and if it is the correct one,then do we need to tell our reseller that this product number(ips services) is for our asa bundle and then he should include asa serial number with licese contract?or no this license ordering is completly independent from ASA's boundle or serial number?Thanks
06-09-2009 12:30 PM
OOPS, mistake on my part.
I misread your post (even when I copied the part number). I guess I need new glasses.
Yes CON-SU1-AS2A10K9 you found would be the correct one.
Your reseller should either sell you this Cisco Service for IPS contract OR your reseller may provide their own support contracts..
Both the ASA serial number AND the AIP-SSM serial number will need to be attached to the service contract.
06-10-2009 06:21 AM
You did not believe what I told you? At least go and check online, you will find that one year support is included with the ASA+IPS bundles. If you have extra money to spend, then thats ok :)
This is a pre-sales quote generated using Cisco's pre-sales Dynamic Configurator :)
Product Description Quantity Discount Price Lead Time
ASA5520-AIP20-K9 ASA 5520 Appliance w/ AIP-SSM-20, SW, HA, 4GE+1FE, 3DES/AES 1 0.00 15,995.00 14 Days
CAB-AC Power Cord,110V 1 0.00 0.00 14 Days
SF-ASA-8.0-K8 ASA 5500 Series Software v8.0 1 0.00 0.00 14 Days
ASA5500-SSL-25 ASA 5500 SSL VPN 25 User License 1 0.00 3,095.00 14 Days
ASA5520-VPN-PL ASA 5520 VPN Plus 750 Peer License 1 0.00 0.00 14 Days
ASA5500-ENCR-K9 ASA 5500 Strong Encryption License (3DES/AES) 1 0.00 0.00 14 Days
ASA-AIP-20-INC-K9 ASA 5500 AIP Security Services Module-20 included w/ bundles1 0.00 0.00 14 Days
SF-ASA-AIP-6.0-K9 ASA 5500 Series AIP Sofware 6.0 for Security Service Modules1 0.00 0.00 14 Days
ASA-VPN-CLNT-K9 Cisco VPN Client Software (Windows, Solaris, Linux, Mac) 1 0.00 0.00 14 Days
ASA-180W-PWR-AC ASA 180W AC Power Supply 1 0.00 0.00 14 Days
ASA-ANYCONN-CSD-K9 ASA 5500 AnyConnect Client + Cisco Security Desktop Software1 0.00 0.00 14 Days
CON-SUO3-ASAINC20 IPS SVC,ONSITE24X7X4 AIP SSM-20 included in ASA systems 1 0.00 0.00
CON-SUO3-AS2A20K9 IPS SVC,ONSITE24X7X4 ASA5520 w AIP-SSM-20, 4GE+1FE, 3DES/AES1 0.00 4,599.00
Notice the penultimate line? :)
Regards
Farrukh
06-09-2009 08:14 AM
Not have a valid license installed will not prevent your sensor from working. It will still perform all the IDS/IPS functions. You can also upgrade the OS with a license and each upgrade come with the most current signature set. Not having a license prevents you form loading signature updates. Often new signatures are refined or tuned after being released, so sig updates are nice if you are really watching what sigs hit and performing analysis on attacks.
06-09-2009 08:43 AM
Thanks Marcabal.I have one Question.You said that we will need CON-SU1-AS1A10K9 for our bundle if our bundle is ASA5520-AIP10-K9 and our bundle it is but in the license description it is for ASA5510 not 5520 and i found this product number for asa5520 --->CON-SU1-AS2A10K9 .is this correct one for our bundle?and if it is the correct one,then do we need to tell our reseller that this product number(ips services) is for our asa bundle and then he should include asa serial number with licese contract?or no this license ordering is completly independent from ASA's boundle or serial number?Thanks
something else.i also found this partnumber CON-SU1-ASIP10K9.is this only for AIP-SSM10 and not for ASA5520?can i order this partnumber for my bundle?thanks
06-09-2009 12:34 PM
CON-SU1-AS2A10K9 would be the correct contract to put all parts of the bundle under the maintenance contract.
The CON-SU1-ASIP10K9 is what is used when the AIP-SSM-10 is purchased as a spare.
I Do Not Know whether or not this Cisco Service for IPS contract can be used to cover just the AIP-SSM-10 if it was purchased as part of a Bundle instead of a Spare. You would have to ask your reseller or Cisco Sales Representative.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide