ASA as UTM

[sushil]

Hi,

Wanted to know can I add AIP,CSC10 etc. module to same hardware.i.e Having a 5510 bundle with me.

My need is to add Anti-x/Antispy,URL filter and IPS.

I was made to understand that all features won't run on the box,can run Anti-x or URL but not both.

Experts inputs on this.

Reg,

Sushil

[Jennifer Halim · Accepted solution]

No, unfortunately you can only have either the AIP module or CSC module installed in an ASA firewall. You can't have both installed.

You can run either the anti spyware/url filtering feature which is through the CSC module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6823/product_data_sheet0900aecd80402e4f.html

OR, the intrusion prevention feature which is through the AIP module:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916.html

Hope that helps.

[sushil]

Hey,Thanks for prompt reply.

I am simply fail to understand why Cisco is not coming out with all in one box.

Checkpoint,Juniper,Fortinet,Sonicwall etc. are already doing it in one device.

Any specific reason why Cisco is yet to launch any thing like this?

Reg,

Sushil

[Jennifer Halim]

As it is actually modular base instead of integrated into the ASA code, it only supports 1 module at the time.

Good suggestion of having multiple features in 1 box, however, sometimes it impacts on the performance of the traffic through the box.