Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPS, AVC, WSE and Botnet filter on ASA 5585-X at the same time.

Hi,
I'm looking at specs for ASA5585-X and I'm wondering whether it can run IPS, Application control, web security and botnet filtering at the same time.

I tried configuring ASA5585-S20P20-K9 in the configuratior but I don't see an option to add licenses for AVC, WSE and botnet filtering.

Are those licenses ordered separately? Is this what we need to buy aditionaly: ASA5585-20-AWI-1Y=?

Does the ASA5585-20-AWI-1Y= cover IPS signature updates or do we need to but CON-SU1 support for that?


What about botnet filtering?

Regards.

Everyone's tags (6)
3 REPLIES
New Member

IPS, AVC, WSE and Botnet filter on ASA 5585-X at the same time.

Hi,

Cisco ASA5500-X support only one module at a time like, This part number for ASA with IPS (ASA5585-S10P10XK9)and this part number

Cisco ASA CX Context-Aware Security (ASA5585-S10C10-K9).

Here is the below link for knowledge base share.

https://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/modules_cx.pdf

http://www.cisco.com/en/US/docs/security/asa/hw/maintenance/5585guide/overview.html

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/qa_c67-700608.html

Regards

Parosh

New Member

IPS, AVC, WSE and Botnet filter on ASA 5585-X at the same time.

Yes, you can only run one module at a time (such as an IPS). The Botnet Traffic Filter runs on the ASA itself though, and is worth the money in my opinion. So in our case we run both an IPS module and the BTF on the ASA in our 5585-x pair.

Graham

New Member

IPS, AVC, WSE and Botnet filter on ASA 5585-X at the same time.

hi,

For botnet traffic filtering you must purchased subscription license. If you choose ASA5585 with CX content filtering module, As well as you can choose botnet license.

parosh

1263
Views
0
Helpful
3
Replies