×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

IPS functionality addition on ASA5585-S40-K9

Answered Question

Hi,

I sold two quantity of ASA5585-S40-K9 to a customer. They are in HA configuration and running 9.1 software image. Now customer wants to have IPS functionality on these ASA devices. I need your help on following two points:

1. Can you please share the BOM to add the IPS functionality on these existing ASA devices?

2. Can the IPS functionality thus added work on Active-Active? Kindly help me understand.

 

Thank you.

Regards,

Ram

Correct Answer by Laura Zamora about 3 years 1 week ago

Hello Ram,

The IPS that will be available on this platform is a software based so no module is needed.

You will be needing the license to enable the IPS on the ASA itself and then one license applied on the IPS for the signatures.

Then eveything else will be working the same as any ips module.

 

Regards,

 

Laura 

 

 

 

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Laura Zamora Mon, 08/11/2014 - 16:36
User Badges:
  • Cisco Employee,

Hello Ram,

The IPS that will be available on this platform is a software based so no module is needed.

You will be needing the license to enable the IPS on the ASA itself and then one license applied on the IPS for the signatures.

Then eveything else will be working the same as any ips module.

 

Regards,

 

Laura 

 

 

 

h.3brahimi Mon, 08/18/2014 - 06:03
User Badges:

Hello everyone,

As far as I know the IPS funtionality in 5585-x is only supported through SSP modules and the mentioned model has this module installed in it. The license you need for the IPS funtionality for 1 year can be achieved through the following part number:

ASA5585-40-IP1Y=

You can use the following part number for signature update:

L-ASA5585-40-1SCA=

You can extend the time for IPS functionality up to 5 years and signature update up to 3 years.

Regarding A/A configuration, there is no obstacle and you can implement IPS functionality using virtual sensors.

Regards,

Hesam

 

Actions

This Discussion

Related Content