ASA5515-IPS Renewal

[yassineguarmouch]

Hi,

I'm wondering why i couldnt find a correct SKU to renew my ASA5515-IPS it seems like there is no SKU for IPS only.

My show version : 

Cisco Adaptive Security Appliance Software Version 9.2(4)14 Device Manager Version 7.5(2)153

Compiled on Thu 18-Aug-16 15:46 PDT by builders System image file is "disk0:/asa924-14-smp-k8.bin"

Config file at boot was "startup-config"

Hardware:   ASA5515, 8192 MB RAM, CPU Clarkdale 3059 MHz, 1 CPU (4 cores)

            ASA: 4096 MB RAM, 1 CPU (1 core) Internal ATA Compact Flash, 8192MB BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB

Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x1)

                             Boot microcode        : CNPx-MC-BOOT-2.00

                             SSL/IKE microcode     : CNPx-MC-SSL-PLUS-0020-B1

                             IPSec microcode       : CNPx-MC-IPSEC-MAIN-0026

                             Number of accelerators: 1 Baseboard Management Controller (revision 0x1) Firmware Version: 2.4

Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 100            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

Encryption-DES                    : Enabled        perpetual

Encryption-3DES-AES               : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 250            perpetual

Total VPN Peers                   : 250            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

IPS Module                        : Enabled        perpetual

Cluster                           : Enabled        perpetual

Cluster Members                   : 2              perpetual

This platform has an ASA 5515 Security Plus license.

Failover cluster licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 100            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

Encryption-DES                    : Enabled        perpetual

Encryption-3DES-AES               : Enabled        perpetual

Security Contexts                 : 4              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 4              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 250            perpetual

Total VPN Peers                   : 250            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 4              perpetual

Total UC Proxy Sessions           : 4              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

IPS Module                        : Enabled        perpetual

Cluster                           : Enabled        perpetual

This platform has an ASA 5515 Security Plus license.

Regards.

[Marvin Rhoads]

If you currently have the legacy IPS module under support, the renewal is via the Smartnet contract.

There is a special contract type for these ASAs with legacy IPS modules ending in "SU1".

There is no separate SKU for IPS only.

If you do not have a subscription currently, you cannot get one as these modules have been end of sales for some time and only renewals are being accepted (and only for one more year until they are completely end of life).

[yassineguarmouch]

Thank you for your reply!!!!

according to what you said : 

"There is a special contract type for these ASAs with legacy IPS modules ending in "SU1"

What is the type of this contract? is it in CCW?

Regards.

[Marvin Rhoads · Accepted solution]

You cannot order it in CCW (Cisco Commerce Workspace) as it is end of sales. The old part number was "CON-SU1-A15IPS9".

(That's in the US - part numbers may vary outside the US.)

The reseller who currently has the contract should be able to renew it in CSCC (Cisco Service Contract Center).

[epscaps_sa]

---

@Marvin Rhoads wrote:

... and only renewals are being accepted (and only for one more year until they are completely end of life).

---

Looking at the End of Life Announcement, it appears that the "End of Service Contract Renewal Date" is 11/20/2021, but I was unable to renew my contract that is expiring this year. I'm trying to understand how you knew last year that the renewals would no longer be processed this year...?

Reference; https://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/eos-eol-notice-c51-738644.html

[Marvin Rhoads]

I was referring specifically to the SKU which has the classic IPS subscription bundled. It was that one which was cited earlier in this thread.

That is separate from the SKUs for the hardware alone or the SKUs for the Firepower service module licenses. Those SKUs are the ones that are still offered going forward and are cited in the link you provided.