Cloud Web Security sizing, ASA5505

[alig.norbert]

Hi all,

I'm a little bit confused about the licensing, sizing of Cisco Cloud Web Security (CWS).
We have a customer with 2 ASA5505 (unlimited user license) and we would like to order CWS for those two ASA's.

Is it possible to connect two devices with the same CWS account and have the same ruleset set up?

The below link shows me that the ASA5505 can handle max. of 25 CWS named users.
How do I need to understand that? What is the difference between named user and ip address that are going throught the ASA browsing HTTP,HTTPS?

I hope not that only 25 user can be handled concurrend while browsing....
 
http://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-appliance-asa-software/whitepaper_C11-715169.html

Thanks,
Norbert

[kushsriva · Accepted solution]

Hi,

Regarding the deployment, yes this can be accomplished by creating a single company Key on the CWS portal and configuring the same company key for the CWS configuration on both the ASA.

You can check the configuration at http://www.cisco.com/c/en/us/products/collateral/security/cloud-web-security/solution_overview_c07-721174.html

Regarding Sizing the doc clearly mentions "Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet". So it is based on the total number of users who would be using the CWS service through the ASA 5505.

Regards,

Kush

[alig.norbert]

Hi Kush,

Thank you for the fast answer.

So, if the customer has now appr. 50 users through one ASA5505, it needs to get another ASA5505 to handle all 50'ts (each 25), right?

Personally, I thing it's a poor Cisco design and not very scalable.

Kind regards,
Norbert