High availability for Firepower 1010 ASA image - licensing requirements

[AndreasKvist]

Hello, 

Im looking for a confirmation that both devices in a HA setup based on FPR1010 with ASA image have to have the security license enabled. That it is not sufficient with only one of the units in the HA to have the security license enabled. 

• Security Plus license—L-FPR1010-SEC-PL=. The Security Plus license enables failover. 

This is not the same thing as: Both units in a HA needs to have the security plus license enabled. 

If you can confirm this and possibly point me to a document where this is stated. 

Thanks

BR

Andreas

[Spooster IT Services · Accepted solution]

Hello @AndreasKvist,

Yes, both unit needs to have Security plus license. See the link below for your reference and search for:

Failover Licenses for the Firepower 1010
"Each Firepower 1010 must be registered with the License Authority or satellite server. Both units require you to enable the Standard license and the Security Plus license before you can configure failover."

CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.14 - Licenses: Smart Software Licensing (ASAv, ASA on Firepower) [Cisco Adaptive Security Appliance (ASA) Software] - Cisco

***Please rate all helpful posts***

[AndreasKvist]

Thanks!

Thats the documentation i needed. Can´t believe how hard it was to find it. 

Have a great day. 

BR

Andreas

[Spooster IT Services]

@AndreasKvist 

Yes, it's a bit hard to find as the information is just a one-liner.

***Please mark all helpful posts***

[balaji.bandi · Accepted solution]

yes correct all should be the same on both the devices to enable HA features.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/guide-c07-737902.html