cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1483
Views
20
Helpful
3
Replies
Highlighted
Beginner

ASA FP Service IPS 3Y-Subscription license

Hello,

We buy a  brand new ASA 5525 with FP service (Bundle) with L-ASA5525-TAM-3Y  to have the IPS/App/AMP services for 3 year. After installation I can’t find any info about the IPS expiration date on FMC. The license section of FMC only show the “Protection Control” license is valid and expiration is NEVER (I think that is the perpetual free license?) , but show the expiration date for MALWARE protection a specific date. so where is the 3Year IPS license subscription? my manager suspect that the partner never installed the L-ASA5525-TAM-3Y   and gust installed the Free Control License.

I attached the FMC license page

Thanks

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
VIP Advocate

Refer to the table 3 in the

Refer to the table 3 in the following guide:

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/licensing_firepower_system.html#ID-2240-00000035

The TAM licenses includes the Protection and Malware feature set. Control comes along with the device. Out of these 3, only the Malware license is capable of expiry. Protection and Control never expire, but you need to have a valid TAM license to pull updates etc.

View solution in original post

Highlighted
Beginner

You cannot see the end date

You cannot see the end date of the SKU that you ordered on the Paper document, FMC or the Cisco account. You can only see this 3 years on the contract of what you have ordered. You can check the end date of the contract through Cisco Service Contract Center.

View solution in original post

3 REPLIES 3
Highlighted
VIP Advocate

Refer to the table 3 in the

Refer to the table 3 in the following guide:

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/licensing_firepower_system.html#ID-2240-00000035

The TAM licenses includes the Protection and Malware feature set. Control comes along with the device. Out of these 3, only the Malware license is capable of expiry. Protection and Control never expire, but you need to have a valid TAM license to pull updates etc.

View solution in original post

Unfortunately, that seems to

Unfortunately, that seems to have been a mistake on Cisco's part that they have "fixed" with the Firepower Threat Defense software. The new FTD install (native on ASA rather than ASA+Firepower Services) makes the IPS (which used to be Protection and Control) a separate license that must be purchased and expires after 1 or 3 years. I think there may be a 5 year option as well. The perpetual license is only for basic application identification, so you can block things like Facebook but you get no IPS functionality (or malware, URL filter) out of the box anymore.

Highlighted
Beginner

You cannot see the end date

You cannot see the end date of the SKU that you ordered on the Paper document, FMC or the Cisco account. You can only see this 3 years on the contract of what you have ordered. You can check the end date of the contract through Cisco Service Contract Center.

View solution in original post