topic Re: Firepower MCv Device License - issue in Network Security

Firepower MCv Device License - issue

mljevakovic — Fri, 19 Jul 2024 14:44:09 GMT

Hi,

we had ASA firewall with FTD module which we controled by FMC. We had SF-FMC-VMW traditional license for FMC. Lastly we change ASA with FTD device and keep FMC. But during upgrade of the FMC licensing system changed from traditional to Smart licensing model. Now we have error "Out of Compliance".

How to resolve this issue? Any help appreciate.

Re: Firepower MCv Device License - issue

Marvin Rhoads — Fri, 19 Jul 2024 14:55:59 GMT

You can open a TAC license case and provide either the original FMCv PAK or Sales Order number and they will provision an FMCv Smart license for you. I did that myself for a customer just last month.

Re: Firepower MCv Device License - issue

mljevakovic — Mon, 22 Jul 2024 08:35:58 GMT

Thanks Marvin. Unfortunately, the customer bought FMC a long time ago and they don't know neither PAK or SO. They bought it from other partner.

Re: Firepower MCv Device License - issue

Marvin Rhoads — Mon, 22 Jul 2024 12:41:43 GMT

Unfortunately it is very hard to get Cisco to provision the FMCv classic license as Smart without either of those pieces of information. If it's just a 2-device license, it may be easier to just buy a new one. They are only US$535 list price. (SKU SF-FMC-VMW-2-K9)

You can choose to run it "out of compliance". I don't normally advocate this but Cisco reallly needs to get their act together in making these products that you already have licensed automatically shared as Smart licenses - the entitlement is there, they just force the customer to provide information unnecessarily (in my opinion).

As long as the managed devices are licensed, the FMCv smart license being out of compliance won't affect the ability to use any of the managed device licenses.