Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

how to activate IPS on asa5515x

I purchased 4 Cisco ASA5515x with IPS subscription.

Firewalls show that IPS is disabled when I do show version.

I do have subscription license file I got from cisco but how to I activate IPS on my new firewall?

Should I have been given activation keys for that?


Cisco Employee

Hi James,If you have got L

Hi James,

If you have got L-ASA5515-TA-LIC= PID as part of subscription then this PID will provide only legal entitlement to obtain signature updates for PROTECT+CONTROL.

You will need to buy ASA5515-CTRL-LIC= PID for the sensor to obtain the license for "PROTECT+CONTROL"

Please reach out the GLO team to obtain help on the CTRL LIC PID



Hall of Fame Super Silver

the answer varies according

the answer varies according to which IPS type you purchased. There are three distinct types currently offered:

1. Classic IPS (dedicated software module)

2. NGFW IPS service (runs on CX module)

3. Firepower IPS (runs on Firepower module)

#3 is the use case for which DD replied. Any Firepower services require the license to be applied on the Firesight manager (separate product running on appliance or as a VM).

#2 requires the license to be activated in Prime Security Manager (PRSM) GUI. PRSM runs either on the ASA itself or as a separate VM (in what is known as "off-box" or multi-device mode).

#1 requires setup of the IPS module with ability to reach Internet. The license is automatically registered associated with your product serial number.