Does my IPS moudle work well ?

[leimin fan]

IPS# show version
Application Partition:

Cisco Intrusion Prevention System, Version 7.1(6)E4

Host:                                             
    Realm Keys          key1.0                    
Signature Definition:                             
    Signature Update    S648.0        2012-05-30  
OS Version:             2.6.29.1                  
Platform:               ASA5515-IPS               
Serial Number:          FCH162573TV               
No license present <<=========================Why there  is  present "no license present"  ?  I am not bug the services of Signature update.

Sensor up-time is 5:59.
Using 2899M out of 3731M bytes of available memory (77% usage)
system is using 33.6M out of 160.0M bytes of available disk space (21% usage)
application-data is using 70.8M out of 177.5M bytes of available disk space (42% usage)
boot is using 62.5M out of 77.1M bytes of available disk space (85% usage)
application-log is using 19.3M out of 513.0M bytes of available disk space (4% usage)

MainApp            S-2012_AUG_24_05_31_7_1_5_3   (Release)   2012-08-24T05:40:50-0500   Running  
AnalysisEngine     S-2012_AUG_24_05_31_7_1_5_3   (Release)   2012-08-24T05:40:50-0500   Running  
CollaborationApp   S-2012_AUG_24_05_31_7_1_5_3   (Release)   2012-08-24T05:40:50-0500   Running  
CLI                S-2012_AUG_24_05_31_7_1_5_3   (Release)   2012-08-24T05:40:50-0500            

Upgrade History:

  IPS-K9-7.1-6-E4   13:57:07 UTC Mon Aug 27 2012  
       
Recovery Partition Version 1.1 - 7.1(6)E4

Host Certificate Valid from: 25-Nov-2012 to 26-Nov-2014

irewall(config)# show activation-key
Serial Number:  FCH162573TV
Running Permanent Activation Key: 0xe710e247 0x385e4c4c 0x1140bd24 0xdb6454ac 0x800df190

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 100            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active  perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 250            perpetual
Total VPN Peers                   : 250            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
IPS Module                        : Enabled        perpetual     <<===================I had installed the IPS license to firewall.
             
This platform has an ASA 5515 Security Plus license.

The flash permanent activation key is the SAME as the running permanent key.
Firewall(config)#

[turnera]

It looks as though you will need a subscription for your IPS module so you will be able to get updated signature files. If you did not buy that with your 5515, that is what you will need in order to install that license into your IPS module. Just having an overall SmartNet agreement may not be enough for what you need. It is more than likely going to be an additional license purchase.

I ran into the same thing with an NME-IPS module I installed into a 2911 ISR. I received the same indication "no license present" when I logged into the NME module, once I did some additional digging, I found out I required the additional license for the signature updates. This looks to be the same condition to me.

[leimin fan]

I agree with you.It requires the additional license for the signature updates.

[Todd Pula]

The 5500-X platform requires two different license keys.  The first is the IPS feature license key which you have already installed on the ASA.  This will allow you to redirect traffic to the IPS instance.  As others have stated above, you will need a Cisco Services for IPS contract which will entitle you to a signature update license key for the IPS itself.