topic Re: Smart License usage is out of compliance | FMC 6.4.0.10 in Network Security

Smart License usage is out of compliance | FMC 6.4.0.10

mbarada — Wed, 03 May 2023 07:11:59 GMT

Hello,

I came across some similar threads and none seem to solve this problem.

We are facing the below error on FMC 6.4.0.10 since almost 2 months ago:

Here are the expired Cisco AnyConnect Apex licenses shown in the Smart Account, although we are neither using any Apex feature/license on FMC and FTD, nor RA VPN. Instead, AnyConnect and ISE are used for RA VPN on another ASA device, which is not managed by/related to this FMC:

This does not seem to be an SSL certificate problem because I compared the current certificate in "/etc/sf/gch/call_home_ca" with the one mentioned in the below Field Notice and they are identical:

https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html

System -> Licenses -> Smart Licenses is showing the below and pressing the "Re-Authorize" button is not solving the issue:

Based on the above, is it just a bug or something that could be ignored? Since we are planning to upgrade this FMC (and 2 FTDs) to version 7.0.5 soon.

Any hint on how to solve/eliminate this critical health error would be appreciated.

Re: Smart License usage is out of compliance | FMC 6.4.0.10

mbarada — Wed, 03 May 2023 08:21:57 GMT

Additional information:

Devices -> Device Management -> Summary is showing the below, but I am not sure why it is set like that since no RA VPN or Site to Site VPN are used on this device:

So not sure why/when the AnyConnect Apex license has been used on this device.

Please advise.

Re: Smart License usage is out of compliance | FMC 6.4.0.10

Mohammed al Baqari — Wed, 03 May 2023 10:31:39 GMT

Hi,

Its because your FTD has an AnyConnect Apex license enabled. If you don't
have anyconnect configured, just disable the lic. Then try to deploy to
your FTD, if there is any related config to the license, the deployment
will fail and you will get an error. If no dependent config, the deployment
will go successfully.

On a side note, 6.4 is eol for a while.

**** please remember to rate useful posts

Re: Smart License usage is out of compliance | FMC 6.4.0.10

MHM Cisco World — Wed, 03 May 2023 10:38:03 GMT

I know little but I think you not register the license through FMC
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215838-fmc-and-ftd-smart-license-registration-a.html

Re: Smart License usage is out of compliance | FMC 6.4.0.10

Marvin Rhoads — Wed, 03 May 2023 12:41:55 GMT

Like @Mohammed al Baqari said - edit the device license screen and disable AnyConnect Apex.

That will stop FMC from trying to check out an unavailable license (valid SSL certificate to tools.cisco.com notwithstanding) and should clear up the health alert.

Re: Smart License usage is out of compliance | FMC 6.4.0.10

mbarada — Thu, 04 May 2023 05:46:40 GMT

@Mohammed al Baqari and @Marvin Rhoads disabling the license (after making sure it is not being used) solved the issue.

@MHM Cisco World the FMC licenses were already registered.

Thank you all.