topic Hi Richard,The CTRL license in Network Security

Subscription include License?

greyiago85 — Wed, 22 Apr 2015 17:02:46 GMT

Sales team sold a TA-3Y, but I only see the CTRL license listed in the spec. Does purchasing the subscription include the license for TA? Also how do you redeem the subscription? I can't seem to get a PAK key from eDelivery, only a SEULA.

Hi Richard,The CTRL license

Saar Harel — Wed, 22 Apr 2015 18:43:27 GMT

Hi Richard,

The CTRL license is used to convert a regular firewall into a Firepower Capable firewall.
This license is a $0 cost item.
ASA5525-CTRL-LIC=

You will also need to add an SSD to make it into a firepower.
ASA5500X-SSD120=
along with a Smartnet for the SSD.

That covers the hardware.
For the Firepower subscription.
The part numbers should be
L-ASA5525-TA= which has a $0 value
and under it.
L-ASA5525-TA-3Y which is the actual 3 year TA subscription.

Depending on the firewall model there are some promos like TA-PR you can ask about.

I have run into some issues

Marvin Rhoads — Thu, 23 Apr 2015 13:38:41 GMT

I have run into some issues with the PAKs not being delivered via e-Delivery. I have had to use the SO number and open a TAC case to get the PAK which I can then redeem via the licensing portal.

There was a document posted in the Security Partner community last week on getting the PAK from SO number. I couldn't use the process as the Field Engineer since I didn't have access to the order in CCW; but your sales / account manager should be able to call it up.

Please see this link:

https://communities.cisco.com/docs/DOC-55618#h13

(requires partner level access)

The licensing activation is

greyiago85 — Thu, 23 Apr 2015 16:30:04 GMT

The licensing activation is rather strange. I guess the TA sub will display when the Protect/Control is applied to the device. It would be nice if, from FSM, I could see that the three year subscription is activated since the countdown starts from the contract date anyway.

Marvin Rhoads — Thu, 23 Apr 2015 17:39:31 GMT

You can see the available licenses and their status (device applied to, expiration date, etc.) from the Firesight Management center.

Look under System, Licenses (open image below in new tab to zoom):

Yeah, on my lab equipment it

greyiago85 — Thu, 23 Apr 2015 17:40:48 GMT

Yeah, on my lab equipment it shows expiration. However, in prepping a deployment FSM when applying CTRL PAK it doesn't show the subscription for the TA "IPS and Apps". Global Licensing says this is expected, and it will display when the license is applied to the sensor.