Cisco Firepower - AMP/URL License

[cknox1]

Hello,

I have a Cisco Firepower in place and I wanted to check what happen when an AMP/URL Filtering license expires. Will the Firepower policy stop working (Stops filtering traffic) or does the policy continue to work but I cannot make changes to the existing policy?

Any help please?

[balaji.bandi]

yes as per my experience, they stop working once the License expiry and you will not get any updates from AMP.

it all depends on what policy is this, is this policy required to connect AMP process  ?

[cknox1]

Hi thank you for response, 

ASA Traffic is being sent to Firepower and AMP/URL licenses are applied - Yes I have this license there so I can have those additional features.

So it will not filter traffic anymore after expiry? so traffic will be unfiltered?

[Marius Gunnerud · Accepted solution]

The FTDs will not stop passing traffic, however, you will not be able to do any new configurations that require the expired license.  Also, any subscriptions to the cloud for VDB database, AMP, etc. will stop being updated so the FTD can only use the old outdated rules.

[Marvin Rhoads · Accepted solution]

It's as @Marius Gunnerud noted.

Your existing URL Filtering and File (AMP) policies will continue to be available and enforced. However whenever you next make any change to the Access Control Policy, FMC will not allow you to deploy it until you remove all references to the unlicensed features in the rest of the policy.

[cknox1]

Thnk you guys! this helps a lot