topic Re: License control module FirePOWER in Network Security

License control module FirePOWER

fcorre — Fri, 21 Feb 2020 16:47:23 GMT

Dear,

How are you? please your support. We will implement modules SFR to two ASA in production and one FMC. We bought the license L-ASA55XX-TAM , that contemplate AMP and IPS and SSD disk. To enable both license I understand that is necesary license control, we dont have that license, is really necesary or license L-ASA55XX-TAM considerate also control?

Thanks very much.

Re: License control module FirePOWER

Tarik Elkhatib — Fri, 08 Feb 2019 21:03:29 GMT

From Marvins post:

Control by itself gives you very limited functionality. See the following Cisco description:.

Application Visibility and Control (AVC) function by default. This feature provides application identification and control of more than 3,000 applications, detected and classified by risk and business relevance.

To do any of the more interesting policy-based actions, you would need one of the extra cost licenses like IPS, URL Filtering or Advanced Malware Protection (AMP).

If its a legacy ASA5555 for example and you are adding on Firepower you would also need to include the control license it is 0$

PN #

ASA5555-CTRL-LIC=

Cisco ASA5555 Control License

I like to use the Bundle Upgrade sku when upgrading legacy customer which lets you know the Control License should also be ordered if they have legacy ASA without Firepower.

ASA5555-FP-UPG

Upgrade Kit: ASA5555-X FW, IPS, CX to ASA5555-X FirePower

Re: License control module FirePOWER

johnlloyd_13 — Sat, 09 Feb 2019 02:56:04 GMT

hi,

the protect+control license should be included in the box. otherwise, you can simply request TAC licensing team to request one for free.

see helpful link:

http://wannabecybersecurity.blogspot.com/2018/12/cisco-asa-5506w-x-firepower-module.html

Re: License control module FirePOWER

fcorre — Mon, 11 Feb 2019 14:10:42 GMT

Ok, good. Thanks very much Tarik and John.