Cisco ASA SFR Access control policy

[mohan.doss19]

Hi All,

I got an issue while applying access control policy on defense center . it's saying as "does not have a Protection license (required for Intrusion Policy support, File Policy support, and Security Intelligence)" . But when i checked in device management . the target device showing licensed.

Could you any body help to solve this issue. Please find attachment for your reference.

[Marvin Rhoads]

The FMC is definitely showing inconsistent license info for your ASA 5515-X FirePOWER module.

I'd suggest trying to delete and re-add it to FMC and then re-apply the licenses. You might also try upgrading to the 5.4.1 software.

[mohan.doss19]

Thanks Marvin

Current software is in 5.4.1 and also i tried by re-add also. Still the same issue.

[Marvin Rhoads]

OK - I was talking about the module software, not the FireSIGHT Management Center. Your screenshots show it still at the 5.4.0 release.

If that doesn't work, I'd call the TAC. It will be interesting to hear your support experience since they just completed the transition from the old Sourcefire TAC to Cisco TAC a couple of weeks ago.

[mohan.doss19]

Hi Marvin,

The issue is solved. Our FireSIGHT is ASA but license is generated for virtual machines.