What are the FirePOWER ASA models which can support Firepower Threat Defense Image upgrade?
Following are the ASA FirePOWER models which can support Cisco Smart licensing
- ASA5506W
- ASA5506
- ASA5506H
- ASA5508
- ASA5516
- ASA5512
- ASA5515
- ASA5525
- ASA5545
- ASA5555
- FPR9300
- FPR4110
- FPR4120
- FPR4140
- FPR4150
What is process to upgrade to Smart license on FirePOWER?
In order to upgrade to Smart, FireSIGHT/Defense Center needs to be upgraded to new FMC 6.0.1 SW version. There is no FIRESIGHT license in FMC 6.0.1. Add new ASA FirePOWER sensor or upgrade existing ASA FirePOWER sensor with Firepower Threat Defense image. Convert any unfulfilled PAKs to Smart entitlements using “Convert SMART” functionality on LRP. Use CSSM to convert partial device conversion to Smart.
Where can I download the SW for FMC 6.0 and Firepower Threat defense?
SW for FMC 6.0 and FirePOWER Threat Defense can be downloaded from CCO download page. Reach to your Cisco contact for more information.
I tried to upgrade SW on my FireSIGHT device from 5.4 SW to FMC 6.0.1 but it failed
This can be related to HW and SW image dependency. Capture the error and please reach out to Cisco TAC for more help.
I tried to upgrade my ASA FirePOWER device from SW 5.4 to Firepower Threat Defense image but it failed
This can be related to HW and SW image dependency. Capture the error and please reach out to Cisco TAC for more help.
How can I convert my traditional ASA FirePOWER license to Smart entitlements?
- Login to LRP with CCO ID
- Add the PAK to their CCO ID, with Add New PAKs/Tokens option
- On mouse over to the PAK, click on the options view and select "Convert to Smart entitlements"
- Assign the Smart Account and Virtual Account
- PAKs once converted to Smart cannot to converted back
- Click Submit
My tried to convert an Unfulfilled ASA FirePOWER PAK to Smart entitlements but it failed ?
Verify if the PAK is already fulfilled inside the system. You can convert fulfilled PAKs to Smart entitlements. If the PAKs are unfulfilled and if it still fails please reach out to Cisco GLO for more support
Tried to convert a fulfilled ASA FirePOWER PAK to Smart entitlement and it failed ?
Conversion from traditional license PAK to Smart entitlements are allowed for only unfulfilled PAKs in FirePOWER. You can try to partial device conversion to convert the licenses already installed on the device from LRP.
- Login to LRP with CCO ID
- Click on Devices Tab
- Select the device or use filter option to search for particular device using license-key of the device
- On mouse over to the licenses, click on the options and select "Convert to Smart entitlements"
- Select the licenses and submit
Note: You can convert licenses on a device to Smart only if all the licenses on the devices are smart convertible licenses. If there are any licenses which can be converted to Smart the conversion will fail.
How can I add my FMC device to my Smart Account ?
- Login to CSSM portal with CCO ID, select your Smart account
- Select on Inventory tab on the portal, click on New Token
- Copy the Token information
- Login to FMC, on the management console add the device token
How to convert unfulfilled ASA FirePOWER PAK to Smart entitlements ?
- Login to LRP with CCO ID
- Add the PAK to their CCO ID, with Add New PAKs/Tokens option
- On mouse over to the PAK, click on the options view and select "Convert to Smart entitlements"
- Assign the Smart Account and Virtual Account.
- PAKs once converted to Smart cannot to converted back
- Click Submit
What features available on ASA Firepower Threat Defense sensor ?
For ASAFirePOWER sensor with Firepower Threat defense image support smart license for
- BASE
- URLFilter
- Advanced MALWARE (AMP) license
- IPS term subscription
- Advanced LE/SP features
- Strong Crypto
BASE license replaces the "PROTECT+CONTROL" license in SMART
Can we have only ASA Smart features on ASA FirePOWER threat defense image ?
ASAFirePOWER threat defense image support both ASA license and FirePOWER license. All ASA features are turned on default on ASA FirePOWER threat defense imgage.
What are the new FirePOWER Models that support smart license ?
FPR4110, FPR4120, FPR4140, FPR4150, FPR9K
what features support smart license for FPR 4100 and FPR 9300 series ?
For FPR 4100 and FPR9300 we support smart license for BASE, URLFilter and Advanced MALWARE (AMP) license, IPS, Advanced LE/SP features, Strong Crypto
What is FMC?
FireSIGHT also called as "Defense Center" can be upgraded to new SW version FMC 6.0. Once it is upgraded it is called FMC (Firepower Management Center)
Can FMC support both Smart and traditional Licenses?
Yes FMC can support both Smart license and traditional license
FireSIGHT upgrades to FMC failure?
This can be related to HW and SW image dependency
Want FIRESIGHT traditional License to convert to Smart license?
FIRESIGHT license is not required for FMC 6.0.1 (image which supports Smart). It is already integrated into the SW
