IPS, AVC, WSE and Botnet filter on ASA 5585-X at the same time.

kasper123 · ‎02-06-2014

Hi,
I'm looking at specs for ASA5585-X and I'm wondering whether it can run IPS, Application control, web security and botnet filtering at the same time.

I tried configuring ASA5585-S20P20-K9 in the configuratior but I don't see an option to add licenses for AVC, WSE and botnet filtering.

Are those licenses ordered separately? Is this what we need to buy aditionaly: ASA5585-20-AWI-1Y=?

Does the ASA5585-20-AWI-1Y= cover IPS signature updates or do we need to but CON-SU1 support for that?

What about botnet filtering?

Regards.

Mizanul Islam · ‎02-07-2014

Hi,

Cisco ASA5500-X support only one module at a time like, This part number for ASA with IPS (ASA5585-S10P10XK9)and this part number

Cisco ASA CX Context-Aware Security (ASA5585-S10C10-K9).

Here is the below link for knowledge base share.

https://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/modules_cx.pdf

http://www.cisco.com/en/US/docs/security/asa/hw/maintenance/5585guide/overview.html

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/qa_c67-700608.html

Regards

Parosh

grahamt · ‎02-07-2014

Yes, you can only run one module at a time (such as an IPS). The Botnet Traffic Filter runs on the ASA itself though, and is worth the money in my opinion. So in our case we run both an IPS module and the BTF on the ASA in our 5585-x pair.

Graham

Mizanul Islam · ‎02-07-2014

hi,

For botnet traffic filtering you must purchased subscription license. If you choose ASA5585 with CX content filtering module, As well as you can choose botnet license.

parosh