Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 5545 CX or IPS Module

Little confused when researching the ASA5545.

What would be the benefit of going with the CX module compared to the classic IPS module ? Can both do signatures ? 

1 REPLY
Hall of Fame Super Silver

Both get signatures from

Both get signatures from Cisco's SIO.

Classic modules allow more granularity of control and creation of custom signatures. They also allow non-inline (IDS only) deployments, can be managed by CSM, scale to higher throughput (and are thus better suited for data center deployments) and larger enterprise size deployments (>25 units).

The CX-based IPS is better integrated with WSE and AVC, provides more of a holistic one-stop approach, and can also leverage SSL decryption policies to inspect the payload. 

216
Views
0
Helpful
1
Replies
CreatePlease login to create content