The Next Generation Firewall (NGFW) services such as Web Security Essentials (WSE) - which includes URL filtering - have two parts necessary.
First your hardware has to have the Cisco 120 GB SSD inside it. That is where the CX software module software loads and where the logs and reports are stored (in a typical small installation - logs can be sent off-box as well). If your firewall was ordered as "ASA5512-SSD120-K9" (or -K8) then you have the necessary SSD. If not then you have to order it as a spare (part number ASA5500X-SSD120=).
Once you have the necessary hardware, you need the subscription services. A prerequisite for them is having a Smartnet support contract on your hardware. With that, there are several options to then subscribe - you can can AVC (Application Visibility and Control) + WSE or AVC + WSE + IPS (Intrusion Protection System). Those various package combinations are offered in 1, 3 and 5-year subscription terms. The part numbers for those are all on the data sheet - see table 4 here.
Cisco doesn't generally publish prices in a public price list. Your authorized reseller or partner can work with you to price out the necessary components, either for budgetary planning or purchase purposes.
Be advised the the NGFW IPS only gives you IPS services with limited customization features. It does not give URL filtering - that is a feature of Web Securtity Essentials (WSE, which also runs on the CX module).
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :