02-28-2022 01:02 AM
I have the L-FPR1000-ASA license and I'm not sure that I can reimage the FPR1010 to FTD and managed it locally with FDM.
02-28-2022 01:20 AM
you can convert the FPR1000-ASA into FTD mode. first you have to un-register the ASA code from the smart licensing.
The hardware can run either FTD software or ASA software. Switching between FTD and ASA requires you to reimage the device. You should also reimage if you need a different software version than is currently installed. See Reimage the Cisco ASA or Firepower Threat Defense Device.
The firewall runs an underlying operating system called the Firepower eXtensible Operating System (FXOS). The firewall does not support the FXOS Firepower Chassis Manager; only a limited CLI is supported for troubleshooting purposes. See the FXOS troubleshooting guide for more information here
And here how to reimage from ASA to FTD code.
02-28-2022 02:08 AM
If my firewall FPR-1010 did not register to Smart account yet (fresh firewall). So I can proceed to reimage the firewall to FTD and run it with L-FPR1000-ASA license, right?
02-28-2022 02:38 AM
This is correct. ASA→FTD: Firepower 1000 or 2100 Appliance Mode
you can convert the FPR-1010 to FTD no issue but for License you might need to reach cisco Licensing to convert your FPR1000-ASA in to FTD license. if you have a smart licensing port might you may able to get this around.
02-28-2022 04:29 AM
If you are running FTD image the L-FPR1000-ASA license is not applicable. You will require the Firepower base (no cost) and optionally the threat (IPS), URL filtering or Malware license license - depending on what features you wish to use. Those last three all have an associated cost.
02-28-2022 04:46 AM - edited 02-28-2022 04:47 AM
Now I have L-FPR1000-ASA license available on the smart account and did not attached to any firewall yet. So, how can I convert the license to Firepower based license without those optional licenses? In order to run the FTD
02-28-2022 04:59 AM - edited 02-28-2022 04:59 AM
Hi Jumperdub as @Marvin Rhoads mentioned in order to run FTD image the base lic (there's no cost) however, to run the Malware, url (IPS) you need to buy the licenses. your best bet in that case is you reach the cisco representative or you reach you cisco seller (Cisco Partner) they will be able to guide you and give you the cost etc.
02-28-2022 05:02 AM
Smart Licensing for Firepower Features check this link find you useful
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide