Cisco Systems Licensing Requirements for the ASA IPS module

62-5
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter62 Configuring the ASA IPS Module
Licensing Requirements for the ASA IPS module
– ASA 5505—You can use an ASA VLAN to allow access to an internal management IP address
over the backplane. See the “(ASA 5505) Configuring Basic Network Settings” section on
page 62-11 to change the network settings.
Licensing Requirements for the ASA IPS module
The following table shows the licensing requirements for this feature:
The ASA IPS module requires a separate Cisco Services for IPS license in order to support signature
updates. All other updates are available without a license.
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
The ASA 5505 does not support multiple context mode, so multiple context features, such as virtual
sensors, are not supported on the AIP SSC.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
Model Guidelines
•See the Cisco ASA Compatibility Matrix for information about which models support which
modules:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
•The ASA 5505 does not support multiple context mode, so multiple context features, such as virtual
sensors, are not supported on the AIP SSC.
•The ASA IPS module for the ASA 5510 and higher supports higher performance requirements,
while the ASA IPS module for the ASA 5505 is designed for a small office installation. The
following features are not supported for the ASA 5505:
– Virtual sensors
– Anomaly detection
– Unretirement of default retired signatures
Model License Requirement
ASA 5512-X,
ASA 5515-X,
ASA 5525-X,
ASA 5545-X,
ASA 5555-X
IPS Module License.1
1. For failover pairs, both units require the IPS module license.
All other models Base License.