Migrating to AnyConnect Apex -- FirePower2100 ASA

[casey_biggs8]

Using the Cisco FirePower 2100 to manage the ASA, not through the FMC. AnyConnect is already deployed for the correct amount of users but they know how AnyConnect Apex licensing. How is Smart Licensing for Apex deployed on the Firepower 2100? I've looked at the datasheet but it is not clear. Do we just use the same token that is used for the Firepower device?

[Marvin Rhoads]

Yes - just change the license type in the GUI. Assuming the appliance is registered to the smart license server, it will check out the Apex license in lieu of the current Plus license.

[casey_biggs8]

On the 2100 level or need to go down into the ASA and apply it?

[Marvin Rhoads]

ASA on Firepower appliance smart licensing is done via the ASA cli:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/intro-license-smart.html#id_57012

[casey_biggs8]

Will there be any changes from an end user perspective or is it still business as usual? Want to make sure no service is interrupted. 

[Sheraz.Salim · Accepted solution]

the last time I did. we did not see the service interrupted however, best is do it in change control window.

[Marvin Rhoads]

There's no service interruption.

@Sheraz.Salim mentioned, it's a good practice that an approved change window in in place when performing any change to a production device.