Back to Top

Cisco ASA with FirePOWER Services IPS and Apps - subscription license ( 3 y

Mfg. Part: L-ASA5525-TA-3Y | CDW Part: 3933690 | UNSPSC: 43233204
$6,060.00SAVE $2,399.18
$3,660.82Advertised Price
Lease Option ($107.99 /month) Lease Availability

Have leasing questions? Let us know how can we help.

Note: Leasing is available to organizations only. Leasing is not available to individuals.
Mon-Fri 7am-7:30pm CT
Availability:In Stock
Ships same day if ordered before 4 PM CT
  • Subscription license ( 3 years )
  • 1 appliance
  • ESD
  • for ASA 5525-X
View More
Product Overview
Main Features
  • Subscription license ( 3 years )
  • 1 appliance
  • ESD
  • for ASA 5525-X
Meet the industry's first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack - by combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire threat and advanced malware protection features together in a single device. The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today's NGFW solutions are capable of.

Technical Specifications
Specifications are provided by the manufacturer. Refer to the manufacturer for an explanation of the print speed and other ratings.
License Category: Subscription license
License Qty: 1 appliance
License Type: Subscription license
License Validation Period: 3 years

Brand: Cisco
Compatibility: PC
Manufacturer: Cisco Systems
Model: IPS and Apps
Packaged Quantity: 1
Product Line: Cisco ASA with FirePOWER Services

Category: Online & appliance based services
Electronic Distribution: Yes
Installation Type: Locally installed
Subcategory: Online & appliance based services - appliance software , Online & appliance based services - firewall , Online & appliance based services - intrusion detection

Product Reviews
Cisco ASA with FirePOWER Services IPS and Apps - subscription license ( 3 y is rated 3.9 out of 5 by 40.
Rated 4 out of 5 by from It is supported on many platforms and helps us gain access to the network. Valuable Features:There are a lot of features which are good and can be implemented, especially in the latest IOS version of the product.They saved me a lot of time thinking how to solve different scenarios with other solutions.Cisco AnyConnect for remote access is one of them. It is supported on most of the platforms, which business users use. They can gain access to the network, via functions like PBR, Security groups, contexts, and DNS doctoring. This gives a lot of flexibility to the product.Improvements to My Organization:It gave us a more secure environment and a lot of flexibility to the business.Room for Improvement:The next generations part of these products need a better approach. A lot of vendors are definitely a step or two in front of them.Use of Solution:I have worked with these types of firewalls for more than 10 years.Stability Issues:I can say that this product is one of the most stable products I have ever worked with.Scalability Issues:In terms of scalability, this always depends on how the product was chosen and what purpose it will work for. I haven't experienced any issues with the scalability of the product.Technical Support:In terms of technical support, it depends on the different cases. I would surely give Cisco technical support a rating of 9/10.Previous Solutions:I used to work with open source solutions, but the support and complication behind them was definitely not OK. If you want to have flexibility and stability, you have to move on to something that receives more development in that specific area.Initial Setup:The initial setup was straightforward and there was a lot of documentation that can help out with specific cases.Pricing, Setup Cost and Licensing:This is definitely not a cheap solution, but I think it is worth the investment.Other Solutions Considered:We evaluated other solutions like Juniper, but we chose Cisco, since our network was becoming more and more Cisco oriented.Other Advice:I would recommend that you understand the needs of the business case before choosing the product and start implementing it. It is very important to choose the right licenses from the beginning.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2017-07-18
Rated 4 out of 5 by from The simple access rule, Internet NAT and routing are valuable features. Valuable Features:The simple access rule, Internet NAT and routing are valuable features. It is very simple and the most reliable perimeter firewall.Improvements to My Organization:We were using Cisco Security Manager (CSM) to control and configure our all Cisco products, ASA worked very well on the CSM.Room for Improvement:The next-generation firewall could improve, still, they have NGFW 5525 but I haven’t tried it yet.Use of Solution:We have been using this solution for seven years.Stability Issues:We have never faced any stability issues.Scalability Issues:Sometimes, the throughput and CPU counter issues were faced, maybe because we started to use it a long time ago.Technical Support:Technical support is great, they are very responsible, know the bugs and workaround.Previous Solutions:We have used it from the beginning.Initial Setup:The initial setup is not simple and straightforward, because it is Cisco and you need to configure it by CLI.Cost and Licensing Advice:Obviously, Cisco products are not cheap.Other Advice:If you are looking for a stable run and it is easy to find someone to configure the service, then better go for Cisco; their support is very professional.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2017-07-12
Rated 4 out of 5 by from A standard rule based firewall that has solved many remote access problems. Valuable Features:It's a standard rule based firewall for us. The AnyConnect VPN has solved a lot of remote access problems. High availability is good. It will fall back to the other ASA without any disruptions.Improvements to My Organization:It has secured our DMZ.Room for Improvement:I would like to see the following made easier:* Objects* Removing objects* Correlating access rules and AnyConnect ACLsSometimes we suffer from older versions, such as objects, object groups, and aliases (name).Use of Solution:We have been using the solution for nine years.Stability Issues:We did not encounter any stability issues.Scalability Issues:We did not encounter any scalability issues.Technical Support:The technical support is good.Previous Solutions:We used Cisco PIX.Initial Setup:I can't really remember the setup. It was too long ago.Cost and Licensing Advice:We bought the solution, so there were no real recurring costs at that time.Other Solutions Considered:We didn't evaluate any alternative products.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2017-07-03
Rated 4 out of 5 by from Simplified the complexity of our security architecture. Valuable Features:Provides advanced malware capabilities.Improvements to My Organization:Simplified the complexity of our security architecture.Room for Improvement:Integration of advanced malware services with the firewall through Firepower services.Use of Solution:We have been using this solution for six months.Deployment Issues:There were no issues with deployment.Stability Issues:There were no issues with stability.Scalability Issues:There were no issues with scalability.Customer Service:I would give customer service a rating of 10/10.Technical Support:I would give technical support a rating of 10/10.Previous Solutions:We were looking to upgrade to a comprehensive firewall solution that integrated Next Generation Prevention System (NGIPS).Initial Setup:There were no issues with setup.Implementation Team:We implemented in-house.ROI:We calculated for the entire year, but the ROI seemed very decent from the first six months.Cost and Licensing Advice:Pricing: NegotiateLicensing: Buy the advanced Malware Protection license subscription for one year. It is worth the investment.Other Solutions Considered:We evaluated Juniper, Fortinet, and Huawei.Disclaimer: My company has a business relationship with this vendor other than being a customer:We are a CISCO Security Business partner
Date published: 2017-06-28
Rated 4 out of 5 by from One of the features that should be improved is the URL filtering engine, but the stability of this product is one of the key functionalities in our deployment. Valuable Features:The ability to intercept unwanted traffic, and prevent attacks without interrupting everyday work, and the stability of this product are the key functionalities in our deployment.Improvements to My Organization:This product, and our implementation, are not directly correlated with the core business of our company. It is designed to protect our company from outside threats and reduce impact on other network elements, such as the backend firewall, DMZ zone and VPN concentrators.Room for Improvement:Cisco ASA lacks some functionalities, when compared with other vendors’ products. Cisco need to implement some more functionalities, like client-less VPN (HTML5), but I expect that Cisco will continue to add, and improve, features of the product. One of the features that should be improved is the URL filtering engine, as currently it has limited functionality. For full functionality, you will need an external URL filtering server, like Websense.Use of Solution:We have used it for more than five years, and have implemented it for perimeter network protection. It is designed for basic network protection for our corporate environment.Deployment Issues:No issues during the deployment, as we had good planning.Stability Issues:No issues with stability. The device is designed for hard work 24/7. I never have a lack of resources like RAM or CPU. The only reason I need to restart the device is during a software upgrade.Scalability Issues:In our deployment, we did not have a scalability issue.Customer Service:It is very high.Technical Support:We did not have any technical problems with this product, so we have not had need of technical supportPrevious Solutions:We implemented ASA after a complete redesign of our network, and we believe that Cisco ASA is the right solution for our needs.Initial Setup:The initial setup is straightforward, as there is a lot of documentation available on the Cisco site, and other sites, which makes planning and deployment pass without any problems. However, the ASA is a complex device, with a lot of features and further tuning is complex and you must have the right knowledge to do it. Configuration can be done through a Java based application called ASDM or through the CLI interface. Using ASDM is much more simple and easy, but ASDM is not compatible with the newer Java version, so before implementation you must read the compatibility notes. Also, keep in mind that when upgrading ASA software, you must also upgrade the ASDM package.Implementation Team:Initial implementation was through a vendor. I would rate their experience and expertise as 9/10.ROI:Calculating the ROI for network security or IT security is complex and dependent on many factors, like the implementation, role, expectation etc. IT security cannot be compromised, but on the other hand, we must ask how much is enough. In our case, we do not have a defined ROI for this product.Cost and Licensing Advice:The cost of the setup was only the product price, local vendor support for the implementation, and employee training. This product is set it and forget it, so we do not have day to day costs.Other Solutions Considered:We did not evaluate other products. One reason was that we believe that the ASA is a reliable product and fits our needs. Another reason, was the lack of local support for other solutions.Other Advice:Unfortunately, the ASA 5500 is EoS and EoL, and I hope that Cisco’s NGF 5500-X series will be a worthy successor. This does not mean that Cisco will stop software support and will continue to release new software versions with new and improved features for the ASA 5500 series.As with any other product, the main things for a successful implementation are to decide what you want to achieve, and what your main goal is, and then, you need good planning, not only for your current needs, but you also need to keep in mind further grow and needs. Good planning is, at least, 80% of successful implementation.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2017-03-20
Rated 4 out of 5 by from Site to site VPN is easy, but it's very expensive. Valuable Features:* VPN* ASDM configurationFor FirePOWER:* IPS* AMP* URL filteringImprovements to My Organization:It's pretty easy to connect between different branches using site to site VPN.Room for Improvement:Cost, it's very expensive. To migrate from a Cisco ASA 5550 and not drop in performance, you have to go to a Cisco ASA 5555-X with FirePOWER. To fully use the Cisco FirePOWER IPS, AMP and URL filtering, you are forced to (MUST) buy the Cisco FireSIGHT management centre. You also have to buy licensing for Cisco AnyConnect VPN clientUse of Solution:I've been using it since October 2004, so for 10 years.Deployment Issues:Due to the cost, I am still waiting for more funds to deploy the final phase, FirePOWER IPS, AMP and URL filtering.Cisco did an upgrade from v8.2 to v8.3 of the migration system. NAT configuration is different from 8.2 to 8.3. It's not easy to upgrade to 8.3 and above leading to running different software versions.Stability Issues:V8.2 is very stable. With the latest versions it's still early to tell.Scalability Issues:Upgrading from v8.2 to v8.3 is a nightmare. The risks of down time are so high that I am forced to run different versions. Stay with 8.2 on all NAT dependent on your ASA, but again it's all about the cost.Customer Service:Excellent customer service. Cisco listens to their customers.Technical Support:Excellent customer service and documentation.Previous Solutions:We previously used Checkpoint, and I switched because Checkpoint was expensive but now it looks like Cisco is following the same route.Initial Setup:It was not that complex because I was using Cisco routers and switches five years prior.Implementation Team:It was an in-house implementation.ROI:I can't tell right now as I am still investing.Cost and Licensing Advice:The initial investment on the Cisco ASAs was around one million South African Rand and there's a R200,000 annual maintenance cost with Cisco's partners.Other Solutions Considered:No. I went straight to Cisco because of my experience with their CUCM IPT solutions, routers and switches.Other Advice:Budget a lot of money, especially on the initial setup and the annual licensing and maintenance cost.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2017-01-26
Rated 3 out of 5 by from SourceFIRE has improved the IPS functionality, however, it could use better troubleshooting capabilities. Valuable Features:With the ASA there are multiple products depending on your needs based on the two generations of the ASA. Roughly split-up there are 4 products.* 5500 Series basic/standard firewall - This I would rate as 7/10 due to the fact that it's easy to use, manage and deploy. Its scalable SSL, and IPSec VPN options, and is lacking throughput* 5500-X Series basic/standard firewall - This I would rate as 8/10 due to the fact that it's easy to use, manage and deploy. Its scalable SSL, and IPSec VPN options, and it has high throughput* ASA5500 Series with firewall and CX - This I would rate as 5/10 due to fact that even though the firewall and VPN part is easy to manage and deploy, the CX is lacking in stability, and features. Also, it is rather complex to deploy. Add to this the CX lowers the throughput even further* 5500-X Series with firewall and Sourcefire - This I would rate as 9/10 because it's easy to use, manage and deploy the firewall, VPN, and also the SourceFIRE. SourceFIRE works rather well and is by far the most advanced IPS system available. But it decreases the throughput more than you´d likeIn general, I like both the SSL VPN and SourceFIRE. Firstly, for the VPN, both the client and client-less versions are very scalable, flexible, and dynamic in configuration and probably the best SSL VPN solution available in the marked. Secondly, SourceFIRE has improved the IPS functionality and stability of the ASA to a point where you can begin to enjoy the fruits of your solution and root out the bad seed in you network.Improvements to My Organization:For many of my customers, the SourceFIRE solution has been an eye opener of exactly what their users are generating of traffic. Some customers, after reviewing the traffic application usage reports are astounded by the amount of traffic used, for example by Facebook and YouTube. My customers like the visibility into their network usage, and not necessarily wanting to block it, but just to know that they can control the network traffic and utilization if needed.Room for Improvement:Definitely the throughput could use an upgrade when running the SourceFIRE/AMP with the ASA. Also, it could use better troubleshooting capabilities. You are, most of the time, bound to have access to TAC for troubleshooting advanced problems.Use of Solution:Customers where I have deployed these solutions have had them forthree plus years, and most of them have, at the present moment havefirst generation solutions, or are planning an upgrade to the secondgeneration ones (NGFW or NGIPS),Deployment Issues:There are always issues when implementing key equipment like firewalls, especially if you are converting from an unfamiliar platform, activating SourceFIRE, or doing a general maintenance rule clear-up. If you don’t follow best practice, you can seriously impact network performance or unintentionally shut-down services.Stability Issues:In general the ASA has a great software stability reputation, and even though SourceFIRE for ASA is still young, the stability seems to be rather good. Of course you can’t avoid all issues, and you might have to reinstall the SourceFIRE software on the modules. If you're upgrading the ASA from pre code 8.3, you will need to redo the NAT and access rules of the ASA.Scalability Issues:License scalability for SourceFIRE is really not good if you have an ASA in HA as you need two licenses of everything, which is really bad as you wont get double SourceFIRE other than that you need to remember to buy your ASA based on the SourceFIRE's throughput and not the inspection throughput.Customer Service:If you have a service contract with Cisco you can have TAC assistance, software upgrades and next-business-day RMA (or faster) otherwise you are left to yourself or your Cisco partner. Basically without a Cisco service contract, you can't get any help or software from Cisco.Technical Support:Should you have a Cisco service contract, you get access to TAC that will provide you technical assistance towards solving your issue. The TAC experience can vary a lot. In general I would rate it as very good, 4/5.Previous Solutions:Mainly customers switch from other vendor because of VPN features, ease-of-management, and good consultant/partner relationship.Initial Setup:The initial setup is fairly easy and there are wizards for almost all the basic needs, including the initial setup and all types of VPN technologies that the ASA supports.Implementation Team:I am the vendor, and I am an expert with ASA.Other Advice:Make sure you get the right product/license to do the job you need done. If you are in doubt ask a consultant or a Cisco Partner. I have seen cases where a firewall wasn't the right hardware for the job and you can't just switch off the firewall/inspector for some interfaces or networks.Disclaimer: My company has a business relationship with this vendor other than being a customer:Cisco Gold Partner
Date published: 2017-01-25
Rated 4 out of 5 by from An excellent firewall, and one of the best available choices for big size companies. As usual excellence requires money. Valuable Features:ASA is a family of hardware based firewalls, stable and with a low level of work required on the maintenance side. It is a dedicated firewall, so you do not have to manage additional topics like spam, web sites filtering and so on.The routing part is high level as usual with Cisco products.Room for Improvement:You have to know the ASA command line very well because not all operations are available in the graphical interface (or let's say that sometimes it is better to operate with the ASA CLI).If you are searching for an "all in one product" it is not for youOther Advice:ASA is one of the the state-of-the-art firewall devices for security.It is affordable and not too complicated to use if you are doing standard operations (modifying ACLs, natting and so on) on an existing deployment.Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2016-12-25
  • y_2017, m_9, d_23, h_19
  • bvseo_bulk, prod_bvrr, vn_bulk_2.0.3
  • cp_1, bvpage1
  • co_hasreviews, tv_0, tr_40
  • loc_en_US, sid_3933690, prod, sort_[SortEntry(order=SUBMISSION_TIME, direction=DESCENDING), SortEntry(order=FEATURED, direction=DESCENDING)]
  • clientName_cdwg
Adding to Cart...
9/24/2017 10:53:31 AM
^ Back to Top

Maximum 300 characters
An account manager will email you within one business day to confirm your request.

Your Quote has been submitted

What Happens Next? A confirmation email is on its way. Within one business day, you will be contacted by an Account Manager to finalize your quote.


Something went wrong.

Please try again later.