The ASA-X series has many benefits including higher throughput and an IPS that can be installed by simply adding a license key to the ASA-X series. But what about context based security? For example, let’s say that you want to block FaceBook for people that use Mac’s (because you don’t mac users socializing) but allow it for everyone else. Or let’s say that you want to block a tricky application like Skype.

The CX module, which is a hardware module for the ASA-X series, can allow this type of functionality by scanning the traffic and providing context for the traffic not only the application that is running in the traffic.

At the time that this was written the CX module is only available in the high in ASA-X 5585 but it is planned to be moved down into the lower end ASAs over the coming months/years.

Until next time,
TechStop (JW)