FAQ banner
Get the Help and Supports!

This help center can answer your questions about customer services, products tech support, network issues.
Select a topic to get started.

ICT Tech Savings Week
2025 MEGA SALE | In-Stock & Budget-Friendly for Every Project

Firepower License Type by Implementation and Device Platform


General License Management

There are several questions about the Firepower License (including Smart License and a Classic license), such as difference between a Smart License and a Classic license, firepower License Type by Implementation and Device Platform. See more detailed questions and answers below.

Does the Firepower Management Center require a license?

In Version 6.0 and later, the Firepower Management Center manages feature licenses for your devices, but you do not need a feature license to use the Management Center.

In Version 5.4.x and earlier, a FireSIGHT license is required to use a FireSIGHT Defense Center. You must add this license to the Defense Center during initial setup.

What is the difference between a Smart License and a Classic license?

See the first question in each of the following sections:

Can a Firepower Management Center manage devices that use different license types (Smart and Classic)?

Yes. However, the steps you take on the Firepower Management Center to manage the license types differ slightly. For more information, see the Firepower Management Center Configuration Guide.

How do I know whether I should use Classic or Smart Licenses for my devices?

Use the table below.

Caution: Some ASA platforms can run either the ASA FirePOWER module (which uses a Classic license) or Firepower Threat Defense (which uses a Smart License). Make sure to buy the correct license type for the implementation you want, and activate it in the correct licensing portal. If you buy the wrong license type, then activate it in the wrong licensing portal, contact Cisco TAC to resolve the problem.

Table1. Firepower License Type by Implementation and Device Platform

Device

Firepower Software (NGIPS)

Firepower Threat Defense

ASA FirePOWER

Cisco NGIPS for Blue Coat X-Series

Classic

3D500, 3D1000, 3D2000

3D2100, 3D2500, 3D3500, 3D4500, 3D6500 (EOL)

3D9900 (EOL)

Classic

Firepower 7010, 7020, 7030, 7050

Firepower 7110, 7115 7120, 7125

AMP7150

get firepower 7000

Classic

Firepower 8120, 8130, 8140

Firepower 8250, 8260, 8270, 8290

Firepower 8350, 8360, 8370, 8390

AMP8050, AMP8150, AMP8350

get firepower 8000

Classic

Virtual: VMware

Classic

Smart

Virtual: AWS

Smart

Virtual: KVM

Smart

Virtual: Azure

Smart

ASA 5506-X, ASA 5506H-X, ASA 5506W-X, ASA 5508-X, ASA 5516-X

Get the Best Prices on Hot Cisco ASA 5500-X ngfw Models

Smart

Classic

ISA 3000

For supported software versions on this hardware, see the Compatibility Matrix at https://www.cisco.com/c/en/us/support/security/defense-center/products-device-support-tables-list.html.

Smart

(Threat license only.)

Classic

ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, ASA 5555-X

Smart

Classic

ASA 5585-X-SSP-10, -20, -40, -60

Classic

Firepower 2100 Series

Firepower 4100 Series

Firepower 9300

Smart

 Can I convert my Classic license to a Smart License entitlement?

Yes. For more information, see "Convert PAK License SKU’s in LRP to Smart License Entitlements in Smart Software Manager (SSM)" in the Cisco License Registration Portal (LRP) User Guide.

Can I convert my Smart License entitlement to a Classic license?

No. If you accidentally use a Smart License entitlement instead of a Classic license, contact Cisco TAC.

What is the difference between a license and a service subscription?

A Firepower feature license is a right-to-use license. The license is perpetual; you can continue to use the features and functionality present in the version of the feature you initially install, regardless of whether you purchase a Firepower service subscription to support the license.

A Firepower service subscription is an entitlement to download updates related to the feature. For example, if you buy a Threat (T) subscription to support your Threat license, you can download intrusion rule updates. This entitlement is term-based; that is, it expires periodically. For more information, see Firepower License and Service Subscription Expiration.

When does the term for a service subscription start and end? Is the start date tied to the purchase date or the initial activation date?

The start and end date of each service subscription is specified on the sales order. The subscription start date is not tied to the initial activation date.

Is Permanent License Reservation (PLR) available for Firepower Threat Defense devices?

Check the following link for the status of this requested functionality: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc01298/?reffering_site=dumpcr.

More FAQ about the Smart Licensing for Firepower Features, Classic Licensing for Firepower Features, Licensing in High Availability Configurations you can visit here

More Related

ASA 5510 to ASA 5515-X, ASA 5520 to ASA 5525-X

Guide to the New Cisco Firepower 2100 Series

How to know your network needs to upgrade?


Categories: Firewalls