Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA as UTM

Hi,

Wanted to know can I add AIP,CSC10 etc. module to same hardware.i.e Having a 5510 bundle with me.

My need is to add Anti-x/Antispy,URL filter and IPS.

I was made to understand that all features won't run on the box,can run Anti-x or URL but not both.

Experts inputs on this.

Reg,

Sushil

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ASA as UTM

No, unfortunately you can only have either the AIP module or CSC module installed in an ASA firewall. You can't have both installed.

You can run either the anti spyware/url filtering feature which is through the CSC module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6823/product_data_sheet0900aecd80402e4f.html

OR, the intrusion prevention feature which is through the AIP module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916.html

Hope that helps.

3 REPLIES
Cisco Employee

Re: ASA as UTM

No, unfortunately you can only have either the AIP module or CSC module installed in an ASA firewall. You can't have both installed.

You can run either the anti spyware/url filtering feature which is through the CSC module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6823/product_data_sheet0900aecd80402e4f.html

OR, the intrusion prevention feature which is through the AIP module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916.html

Hope that helps.

New Member

Re: ASA as UTM

Hey,Thanks for prompt reply.

I am simply fail to understand why Cisco is not coming out with all in one box.

Checkpoint,Juniper,Fortinet,Sonicwall etc. are already doing it in one device.

Any specific reason why Cisco is yet to launch any thing like this?

Reg,

Sushil

Cisco Employee

Re: ASA as UTM

As it is actually modular base instead of integrated into the ASA code, it only supports 1 module at the time.

Good suggestion of having multiple features in 1 box, however, sometimes it impacts on the performance of the traffic through the box.

3650
Views
0
Helpful
3
Replies
CreatePlease to create content