Cisco Firepower System Feature Licenses
First Published: 2016-01-21
Last Modified: 2017-05-23
Introduction
This document provides an overview of feature licenses for the Firepower System.
Firepower System Feature License Types
Classic Licenses
Available for 7000 Series, 8000 Series, ASA FirePOWER, and NGIPSv devices. Classic licenses require
a product authorization key (PAK) to activate and are non-transferrable between devices. Add the PAK
to your Smart Account to generate a Classic License, then activate the license using either the Firepower
Management Center (for any Classic device) or ASDM (for ASA FirePOWER devices only).
Smart Licenses
Available for Firepower Threat Defense devices. Cisco Smart Licensing allows you to manage a pool
of licenses centrally. Unlike Classic Licenses, Smart Licenses are not tied to a specific serial number
or PAK. You activate a Smart License from either the Firepower Management Center or, in Version
6.1 and later, the Firepower Device Manager.
For more detailed information on these licenses, see the documentation appropriate to the device and Firepower
System version (listed below).
Firepower License Type by Implementation and Device Platform
Use this table to determine whether to activate Classic or Smart licenses for your devices.
Caution
Some device platforms support either Classic or Smart Licenses, depending on the device's Firepower
System implementation. Make sure to activate the correct license type for each device. If you activate the
wrong license type, contact TAC Support.
Cisco Firepower System Feature Licenses
1
Introduction
Licensing Instructions by Firepower System Version
Table 1:
Device
Firepower
Software
(NGIPS)
Firepower
Threat
Defense
ASA
FirePOWER
Cisco NGIPS for Blue Coat X-Series
Classic
—
—
3D500, 3D1000, 3D2000; 3D2100, 3D2500, 3D3500,
3D4500, 3D6500 (EOL); 3D9900 (EOL)
Classic
—
—
Firepower 7010, 7020, 7030, 7050; Firepower 7110, 7115
7120, 7125; AMP7150
Classic
—
—
Firepower 8120, 8130, 8140; Firepower 8250, 8260, 8270, Classic
8290; Firepower 8350, 8360, 8370, 8390; AMP8050, 8150,
8350
—
—
Virtual: VMware
Classic
Smart
—
Virtual: AWS
—
Smart
—
Virtual: KVM
—
Smart
—
Virtual: Azure
—
Smart
—
ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X,
ASA5516-X
—
Smart
Classic
ISA3000
—
—
Classic
ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X,
ASA5555-X
—
Smart
Classic
ASA5585-X-SSP-10, -20, -40, -60
—
—
Classic
Firepower 2110, 2120, 2130, 2140
—
Smart
—
Firepower 4110, 4120, 4140, 4150
Firepower 9300
Licensing Instructions by Firepower System Version
Use the table below to find Firepower feature license instructions by Firepower System version.
Cisco Firepower System Feature Licenses
2
Introduction
Licensing Instructions by Firepower System Version
Table 2:
Firepower
License Type
System Version
Licensing Chapter
6.2.1
Classic
N/A
Smart
Supported Firepower Threat Defense devices, managed by the Firepower
Management Center: Licensing the Firepower System
Supported Firepower Threat Defense devices, managed by Firepower
Device Manager: Licensing the System
6.2.0.x
Classic
Cisco ASA with FirePOWER Services, managed locally: Licensing the
ASA FirePOWER Module
Cisco ASA with FirePOWER Services, Firepower 7000 and 8000 Series
devices, and NGIPSv, managed by the Firepower Management Center:
Licensing the Firepower System
Smart
Firepower Threat Defense devices, managed by the Firepower
Management Center: Licensing the Firepower System
Firepower Threat Defense devices, managed by Firepower Device
Manager: Licensing the System
6.1.0.x
Classic
Cisco ASA with FirePOWER Services, managed locally: Licensing the
ASA FirePOWER Module
Cisco ASA with FirePOWER Services, Firepower 7000 and 8000 Series
devices, and NGIPSv, managed by the Firepower Management Center:
Licensing the Firepower System
Smart
Firepower Threat Defense devices, managed by the Firepower
Management Center: Licensing the Firepower System
Firepower Threat Defense devices, managed by the Firepower Device
Manager: Licensing the System
6.0.1.x
Classic
Cisco ASA with FirePOWER Services, managed locally: Licensing the
ASA FirePOWER Module
Cisco ASA with FirePOWER Services, Firepower 7000 and 8000 Series
devices, and NGIPSv, managed by the Firepower Management Center:
Licensing the Firepower System
6.0.0.x
Smart
Firepower Threat Defense devices, managed by the Firepower
Management Center: Licensing the Firepower System
Classic
Cisco ASA with FirePOWER Services, managed locally: Licensing the
ASA FirePOWER Module
All other implementations: Licensing the Firepower System
Cisco Firepower System Feature Licenses
3
Introduction
For Assistance
Firepower
License Type
System Version
Licensing Chapter
5.4.x
Cisco ASA with FirePOWER Services: Licensing the ASA FirePOWER
Module
Classic
All other implementations: Licensing the FireSIGHT System
5.3.1.x
Classic
Licensing the FireSIGHT System
For Assistance
If you have any questions about installing or using Firepower feature licenses, contact TAC Support:
• Visit the Cisco Support site at http://support.cisco.com/.
• Email Cisco Support at mailto:[email protected].
• Call Cisco Support at 1.408.526.7209 or 1.800.553.2447.
Cisco Firepower System Feature Licenses
4
© 2016
Cisco Systems, Inc. All rights reserved.