Firepower 2110 Security Contexts License

[Ahmed843]

Hello Everyone

I have two Firepower 2110 in my network ACTIVE/STANDBY, and it's run in mode: multiple. 

My question here how many Contexts still I can add, because every FW show me different number,   

FW1/admin# show context count

Total active Security Contexts: 10

-----------------------------------------------------------------

License mode: Smart Licensing

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 1024
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 12
Carrier : Disabled
AnyConnect Premium Peers : 1500
AnyConnect Essentials : Disabled
Other VPN Peers : 1500
Total VPN Peers : 1500
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 4000
Cluster : Disabled

Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 1024
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 14
Carrier : Disabled
AnyConnect Premium Peers : 1500
AnyConnect Essentials : Disabled
Other VPN Peers : 1500
Total VPN Peers : 1500
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 4000
Cluster : Disabled

[balaji.bandi]

Firepower 2110  running with ASA? What ASA code? Better check show  version give you information

Are both devices in an Active/Active pair?

[Marvin Rhoads]

As shown in Table 2 in the link below, the maximum number of contexts supported by a 2110 running ASA code is 25.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

When you have an HA pair, each member comes with 2 contexts included. That is why you will see the four additional contexts under "Failover cluster licensed features" - 2 from the Primary plus two more added from the Secondary unit (in addition to any you have added via separate context license(s)).

[sdroy]

Your Cisco Firepower 2110 devices support different security context limits depending on licensing and failover setup. Individually, under Smart Licensing, each device allows up to 12 security contexts, while the failover cluster configuration permits up to 14. Since you currently have 10 active contexts, you can add 2 more per device or 4 in total within the failover setup. The differing numbers between devices might be due to how licensing limits are reported under individual and cluster configurations

[Ahmed843 · Accepted solution]

Hi all, And Thanks for the help, 

I did open a case with cisco because I was really confused and below is the replay:

Dear,

My name is N\A, and I am an engineer from the Cisco Global Licensing Operations Team. I have the ownership of the Service request - 000.

 Problem description: Firepower 2110 Security Contexts License.

 Action Plan: I checked your smart account - ABC.com and I can see that you have 10 quantity of Security Context licenses and all the quantity is alrady being used.

I’ve checked the licensing details for the secondary unit with serial number 0000.

 Based on my review, as long as both Firepower devices are in an HA pair, the licensing is shared between them. The secondary unit in your HA deployment does not require a separate allocation of additional Security Context licenses beyond what is already registered in your smart account.