General License Management
There are several questions about the Firepower License (including Smart License and a Classic license), such as difference between a Smart License and a Classic license, firepower License Type by Implementation and Device Platform. See more detailed questions and answers below.
Does the Firepower Management Center require a license?
In Version 6.0 and later, the Firepower Management Center manages feature licenses for your devices, but you do not need a feature license to use the Management Center.
In Version 5.4.x and earlier, a FireSIGHT license is required to use a FireSIGHT Defense Center. You must add this license to the Defense Center during initial setup.
What is the difference between a Smart License and a Classic license?
See the first question in each of the following sections:
Can a Firepower Management Center manage devices that use different license types (Smart and Classic)?
Yes. However, the steps you take on the Firepower Management Center to manage the license types differ slightly. For more information, see the Firepower Management Center Configuration Guide.
How do I know whether I should use Classic or Smart Licenses for my devices?
Use the table below.
Caution: Some ASA platforms can run either the ASA FirePOWER module (which uses a Classic license) or Firepower Threat Defense (which uses a Smart License). Make sure to buy the correct license type for the implementation you want, and activate it in the correct licensing portal. If you buy the wrong license type, then activate it in the wrong licensing portal, contact Cisco TAC to resolve the problem.
Table1. Firepower License Type by Implementation and Device Platform
Device |
Firepower Software (NGIPS) |
Firepower Threat Defense |
ASA FirePOWER |
Cisco NGIPS for Blue Coat X-Series |
Classic |
— |
— |
3D500, 3D1000, 3D2000 3D2100, 3D2500, 3D3500, 3D4500, 3D6500 (EOL) 3D9900 (EOL) |
Classic |
— |
— |
Firepower 7010, 7020, 7030, 7050 Firepower 7110, 7115 7120, 7125 AMP7150 |
Classic |
— |
— |
Firepower 8120, 8130, 8140 Firepower 8250, 8260, 8270, 8290 Firepower 8350, 8360, 8370, 8390 AMP8050, AMP8150, AMP8350 |
Classic |
— |
— |
Virtual: VMware |
Classic |
Smart |
— |
Virtual: AWS |
— |
Smart |
— |
Virtual: KVM |
— |
Smart |
— |
Virtual: Azure |
— |
Smart |
— |
ASA 5506-X, ASA 5506H-X, ASA 5506W-X, ASA 5508-X, ASA 5516-X |
— |
Smart |
Classic |
ISA 3000 For supported software versions on this hardware, see the Compatibility Matrix at https://www.cisco.com/c/en/us/support/security/defense-center/products-device-support-tables-list.html. |
— |
Smart (Threat license only.) |
Classic |
— |
Smart |
Classic |
|
ASA 5585-X-SSP-10, -20, -40, -60 |
— |
— |
Classic |
— |
Smart |
— |
Can I convert my Classic license to a Smart License entitlement?
Yes. For more information, see "Convert PAK License SKU’s in LRP to Smart License Entitlements in Smart Software Manager (SSM)" in the Cisco License Registration Portal (LRP) User Guide.
Can I convert my Smart License entitlement to a Classic license?
No. If you accidentally use a Smart License entitlement instead of a Classic license, contact Cisco TAC.
What is the difference between a license and a service subscription?
A Firepower feature license is a right-to-use license. The license is perpetual; you can continue to use the features and functionality present in the version of the feature you initially install, regardless of whether you purchase a Firepower service subscription to support the license.
A Firepower service subscription is an entitlement to download updates related to the feature. For example, if you buy a Threat (T) subscription to support your Threat license, you can download intrusion rule updates. This entitlement is term-based; that is, it expires periodically. For more information, see Firepower License and Service Subscription Expiration.
When does the term for a service subscription start and end? Is the start date tied to the purchase date or the initial activation date?
The start and end date of each service subscription is specified on the sales order. The subscription start date is not tied to the initial activation date.
Is Permanent License Reservation (PLR) available for Firepower Threat Defense devices?
Check the following link for the status of this requested functionality: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc01298/?reffering_site=dumpcr.
More FAQ about the Smart Licensing for Firepower Features, Classic Licensing for Firepower Features, Licensing in High Availability Configurations you can visit here
More Related
ASA 5510 to ASA 5515-X, ASA 5520 to ASA 5525-X