topic FMCv License question in Network Security

FMCv License question

S891 — Sun, 06 Jun 2021 23:08:45 GMT

We are running Virtual FMCs pair (FMCv) and currently we have license for managing 10 devices (SF-FMC-VMW-10-K9).

However, we need to increase the license as our managed devices are more than 10.

My questions is that can we add another 10 devices license SF-FMC-VMW-10-K9 to make the FMCv capable of handling 20 devices OR we have to buy the new license SF-FMC-VMW-K9 which manages up to 25 devices. It will be more cost-effective if we buy only 10 devices license.

Re: FMCv License question

Marvin Rhoads — Mon, 07 Jun 2021 09:54:08 GMT

The licenses are not additive. You have to have to buy the new license SF-FMC-VMW-K9 to be compliant with the licensing agreement.

Re: FMCv License question

michele.rossi@vem.com — Mon, 22 Aug 2022 12:36:51 GMT

Hi,

I've the identical question. After a year I don't know if the answer has changed, but I have open a case at Cisco Support Case Manager. The partial answer below:

"you can simply get another SF-FMC-VMW-10-K9 for the additional 10 devices and handle 20 in total with both SKUs"

"To use the licenses on the FMC, you simply need to apply the new PAK for the license on the FMC License Key to generate the Activation Key and apply the Activation Key on the FMC".

So I think that now the licenses are additive.

Re: FMCv License question

ssruless — Wed, 19 Feb 2025 08:39:21 GMT

Hi I am afraid that it might be an misunderstanding.

Please see this for the clarification:

https://www.cisco.com/c/en/us/products/collateral/security/secure-firewall/guide-c07-737902.html

Licensing Guidance for Cisco Secure Firewall Management Center
Firewall Management Center physical appliances do not require any separate management licenses. Firewall Management Center virtual appliances require only one of the licenses mentioned in the previous table based on the number of devices being managed. These licenses cannot be combined, for example, entitlement for management of four (4) managed devices, a minimum of one (1) Cisco Secure Firewall Management Center, for 10 devices is required. Use of two (2) Cisco Secure Firewall Management Center, for 2 devices licenses is not compliant for this use-case. Separate to the Firewall Management Center, the managed devices each require classic or Smart subscription feature licenses. Firewall Management Center Virtual Appliance Smart SKUs can manage any device running Firewall Threat Defense software.

Re: FMCv License question

Oleg-Starygin — Thu, 04 Dec 2025 10:55:24 GMT

I purchased two SF-FMC-VMW-10-K9 units, but Cisco Smart License shows MCv Device 20, and I am unable to activate the additional FMC. What should I do?

Re: FMCv License question

Aref Alsouqi — Thu, 04 Dec 2025 11:27:20 GMT

Additional FMC or FTD? AFAIK you need an additional FMC license if you want to add an additional FMC, however, with that license you purchased you can manage up to 10 FTD devices from FMC.

Re: FMCv License question

Oleg-Starygin — Thu, 04 Dec 2025 11:37:24 GMT

Additional FMC.
We bought them with the expectation that there would be two FMC licenses for ten devices each.

Re: FMCv License question

Aref Alsouqi — Thu, 04 Dec 2025 12:16:02 GMT

Apologies I overlooked that you purchased two SF-FMC-VMW-10-K9 licenses. What error do you get when you try to register the secondary FMC?

Re: FMCv License question

Oleg-Starygin — Thu, 04 Dec 2025 12:28:05 GMT

Registration to the Cisco Smart Software Manager
Failed to register. But what interests me most is why they were summed up in 20

Re: FMCv License question

Aref Alsouqi — Thu, 04 Dec 2025 12:38:16 GMT

If you click on that license into your smart account, does it give you any more details? is the secondary FMC allowed to talk to CSSM on your firewall?

Re: FMCv License question

Oleg-Starygin — Fri, 05 Dec 2025 04:01:05 GMT

There is nothing similar. It shows that the license is SF-FMC-VMW-10-K9 and the number of managed devices is 20.

Re: FMCv License question

Aref Alsouqi — Fri, 05 Dec 2025 09:22:06 GMT

Not sure, sorry. I would try to raise a case with Cisco licensing team and see what they say.

Re: FMCv License question

Oleg-Starygin — Fri, 05 Dec 2025 11:19:12 GMT

I resolved the issue; I had completely forgotten about the decryption policy. I added the local host to the exceptions, and the activation was successful.

Re: FMCv License question

Aref Alsouqi — Fri, 05 Dec 2025 11:50:00 GMT

Glad to know this is resolved now.