FMCv License question

[S891]

We are running Virtual FMCs pair (FMCv) and currently we have license for managing 10 devices (SF-FMC-VMW-10-K9). 

However, we need to increase the license as our managed devices are more than 10. 

My questions is that can we add another 10 devices license SF-FMC-VMW-10-K9 to make the FMCv capable of handling 20 devices OR we have to buy the new license SF-FMC-VMW-K9  which manages up to 25 devices. It will be more cost-effective if we buy only 10 devices license. 

[Marvin Rhoads]

The licenses are not additive. You have to have to buy the new license SF-FMC-VMW-K9 to be compliant with the licensing agreement.

[michele.rossi@vem.com]

Hi,

I've the identical question. After a year I don't know if the answer has changed, but I have open a case at Cisco Support Case Manager. The partial answer below:

"you can simply get another SF-FMC-VMW-10-K9 for the additional 10 devices and handle 20 in total with both SKUs"

"To use the licenses on the FMC, you simply need to apply the new PAK for the license on the FMC License Key to generate the Activation Key and apply the Activation Key on the FMC".

So I think that now the licenses are additive.

[ssruless]

Hi I am afraid that it might be an misunderstanding. 

Please see this for the clarification:

https://www.cisco.com/c/en/us/products/collateral/security/secure-firewall/guide-c07-737902.html

Licensing Guidance for Cisco Secure Firewall Management Center
Firewall Management Center physical appliances do not require any separate management licenses. Firewall Management Center virtual appliances require only one of the licenses mentioned in the previous table based on the number of devices being managed. These licenses cannot be combined, for example, entitlement for management of four (4) managed devices, a minimum of one (1) Cisco Secure Firewall Management Center, for 10 devices is required. Use of two (2) Cisco Secure Firewall Management Center, for 2 devices licenses is not compliant for this use-case. Separate to the Firewall Management Center, the managed devices each require classic or Smart subscription feature licenses. Firewall Management Center Virtual Appliance Smart SKUs can manage any device running Firewall Threat Defense software.

[Oleg-Starygin]

I purchased two SF-FMC-VMW-10-K9 units, but Cisco Smart License shows MCv Device 20, and I am unable to activate the additional FMC. What should I do?

[Aref Alsouqi]

Additional FMC or FTD? AFAIK you need an additional FMC license if you want to add an additional FMC, however, with that license you purchased you can manage up to 10 FTD devices from FMC.

[Oleg-Starygin]

Additional FMC. 
We bought them with the expectation that there would be two FMC licenses for ten devices each.

[Aref Alsouqi]

Apologies I overlooked that you purchased two SF-FMC-VMW-10-K9 licenses. What error do you get when you try to register the secondary FMC?

[Oleg-Starygin]

Registration to the Cisco Smart Software Manager
Failed to register. But what interests me most is why they were summed up in 20

[Aref Alsouqi]

If you click on that license into your smart account, does it give you any more details? is the secondary FMC allowed to talk to CSSM on your firewall?

[Oleg-Starygin]

There is nothing similar. It shows that the license is SF-FMC-VMW-10-K9 and the number of managed devices is 20.

[Aref Alsouqi]

Not sure, sorry. I would try to raise a case with Cisco licensing team and see what they say.

[Oleg-Starygin]

I resolved the issue; I had completely forgotten about the decryption policy. I added the local host to the exceptions, and the activation was successful.

[Aref Alsouqi]

Glad to know this is resolved now.