Firepower Licenses - NGFWv

[star1]

Hello Community,

I have recently built two firepower as HA and now i would like to apply the Firepower Threat Defense Base Features through the FMC, when i built the FTDs i applied the evaluation licenses for th 90 days because the original licenses order was not in places before.

my questions are below,

1- Where can i see the expiry date for the licenses from FMC.

2- Which CLI command from the FTD is showing the licenses please?

3- Is i apply the licenses will have an impact on the current traffics and polices that already configured?

4- Is there any good documentations shows how to apply the smart licenses step by step please? 

Thank you in advance. 

Kind regards,

SS

[Abheesh Kumar]

Hi,

1. Evaluation license is valid for 90 days. 

2. You need to check this from FMC Gui License tab

3.  If FTD is in cluster, and you switch from an evaluation license to Smart Licensing, service will be interrupted when you deploy the change.

4. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/licensing_the_firepower_system.html#id_75733

Hope This Helps

Abheesh

[star1]

Hello Abheesh Kumar 

Thank you for the quick reply. 

I cannot see the evaluation expired date from the FMC, i go to system,licenses,smart licences and the HA FTDs and there is nothing shows regarding the dates or show how long it has been up and running, do you know any other ways please?

Thank you in advance.

[Mohammed al Baqari]

Hi, I did mention that if you are using smart license, you won't see it
from FMC. You need to go to cisco smart license portal

[star1]

Sorry Mohammed,

I didn't explain myself well.

I applied the evaluation licenses during the FTD installation in December 2019.

now i have received the FTD feature based licenses from Cisco. 

our FMC is connected to our Smart Software Manager .

when I check the licenses Status from the FMC, I can see that the Devices are circled green and that means the license already applied but i am not sure if it's still the evaluation licenses or the new feature licenses!!

Does the FMC automatically download the smart licenses from the Smart Licenses Manager or do you have to manually apply the licenses from the FMC to the FTD devices please? 

Thank you. 

[Mohammed al Baqari]

Yes FMC automatically checks. Also, from the portal you should see the
counter under used column increased for the features you enabled (equal the
number of FTD boxes). If the counter is zero then you are still using eval
lic

[Mohammed al Baqari · Accepted solution]

Hi,

1- Where can i see the expiry date for the licenses from FMC.

- System > Licensing > Classic or Smart Licensing (for smart license you
won't see the expiry on FMC. It will be on cisco smart license portal)

2- Which CLI command from the FTD is showing the licenses please?

- You won't get it from FTD if you license from FMC

3- Is i apply the licenses will have an impact on the current traffics and
polices that already configured?

- The features which aren't licensed will be disabled or the policy push
will fail till you disable the features

4- Is there any good documentations shows how to apply the smart licenses
step by step please?

- Check FMC configuration guide


**** please remember to rate useful posts

[star1]

Thank you Mohammed.

I appreciated for your time.

one more question. how do i know if the current license is evaluation or feature based license please?