wheswag.blogg.se

You can configure access control policies without a license however, if you do this, you will not be able to apply the policy until the Protection license is added to the Cisco ASA FirePOWER module. File control allows network security administrators to detect and (optionally) block users from sending or receiving files of specific types over specific application protocols. The intrusion detection and prevention capabilities are used to analyze network traffic for intrusions and exploits, to alert the network security administrator and optionally block offending packets. The Protection license enables a network security administrator to perform intrusion detection and prevention, file control, and security intelligence filtering. Table 2-2 The Different Types of Cisco ASA FirePOWER Services LicensesĪdvanced malware protection (network-based malware detection and blocking)Ĭategory and reputation-based URL filtering

Table 2-2 provides a high-level overview of each license. The following are the different types of Cisco ASA FirePOWER Services licenses: There are no additional licenses required in the Cisco ASA. These licenses are installed in the Cisco FirePOWER module and the Cisco Firepower Management Center.

The Firepower Management Center and the Cisco ASA FirePOWER module require different licenses. You have already learned that the Cisco ASA FirePOWER module can be managed by the Firepower Management Center or ASDM, in the case of the Cisco ASA 5506-X and 5508-X.