License control module FirePOWER

[fcorre]

Dear,

How are you? please your support. We will implement modules SFR to two ASA in production and one FMC. We bought the license L-ASA55XX-TAM , that contemplate AMP and IPS and SSD disk. To enable both license I understand that is necesary license control, we dont have that license, is really necesary or license L-ASA55XX-TAM considerate also control?

Thanks very much.

[Tarik Elkhatib]

From Marvins post:

Control by itself gives you very limited functionality. See the following Cisco description:. 

Application Visibility and Control (AVC) function by default. This feature provides application identification and control of more than 3,000 applications, detected and classified by risk and business relevance.

To do any of the more interesting policy-based actions, you would need one of the extra cost licenses like IPS, URL Filtering or Advanced Malware Protection (AMP).

If its a legacy ASA5555 for example and you are adding on Firepower you would also need to include the control license it is 0$

PN # 

ASA5555-CTRL-LIC=

Cisco ASA5555 Control License

I like to use the Bundle Upgrade sku when upgrading legacy customer which lets you know the Control License should also be ordered if they have legacy ASA without Firepower.

ASA5555-FP-UPG

Upgrade Kit: ASA5555-X FW, IPS, CX to ASA5555-X FirePower

[johnlloyd_13]

hi,

the protect+control license should be included in the box. otherwise, you can simply request TAC licensing team to request one for free.

see helpful link:

http://wannabecybersecurity.blogspot.com/2018/12/cisco-asa-5506w-x-firepower-module.html

[fcorre]

Ok, good. Thanks very much Tarik and John.