Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

ASA licensing question !!!

Hi Netpros,

Wanting to configured two ASA on failover A/S with IPS module each. In regards to licensing. What would be the best bundle for me to get. I mean I know with PIxes you can have one with UR license and the other one with FO only. Is there something similar to that for ASAs. your expert comment are much appreciated.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: ASA licensing question !!!

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

3 REPLIES
Cisco Employee

Re: ASA licensing question !!!

There is no concept of UR/R/FO license on ASA unlike Pix

Nobody can suggest you what would be the best bundle for you, however check this link and based on your requirement pick your license.

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html

Re: ASA licensing question !!!

Hi,

There are bundles for IPS which include a combination of ASA (either 5510, 5520 or 5540) plus IPS module (either AIP10 or AIP20) and K8 or K9 software. There's also a DC option.

The comparison chart for ASA's is here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Note that if you go for the 5510 you'll need the security plus license to get A/S failover.

Once you've decided on the model you can then choose a bundle, all of which are here (note that a bundle is a combination of one ASA and one AIP module):

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

K8 versions of software are available even though they are not listed.

Finally, you need to purchase "Services for IPS" to get the signature updates (valid for 1 year) which also includes a smartnet contract.

You also need two of each (two bundles, and two services for IPS) as there is no discount for just running A/S.

HTH

Andrew.

Re: ASA licensing question !!!

Hi Andrew,

Thanks for your reply. I was actually going down the same path. Great to know I was on the same track.

Cheers,

128
Views
0
Helpful
3
Replies
CreatePlease to create content