Question about Firepower license migration

[SIMMN]

I have a pair of ASA with firepower module. The ASA is running 9.2(4)27 code and firepower module is running 5.3.1 code. The Firesight/FMC is 5.4.1.4.

There are Protection, Control licenses (classic licenses). I am also planning to purchase Malware/AMP licenses for the firepower modules.

I built a new FMC 6.2.3 and plan to re-image the firepower modules to register with new FMC. Would I be able to migrate the existing licenses over? If so, do I need to open a TAC case to do so?

I would only need the IPS and Malware/AMP features after the upgrade.

[Marvin Rhoads · Accepted solution]

You can rehost the licenses onto your new FMC via self-service at the software.cisco.com portal. Go to the "Traditional Licensing" link there.

You'll need to rehost the Protection and Control licenses and then add the new Malware ones. Once they're on your FMC you can associate them with your ASAs' Firepower modules.

[SIMMN]

---

You'll need to rehost the Protection and Control licenses and then add the new Malware ones. Once they're on your FMC you can associate them with your ASAs' Firepower modules.

---

Thanks, the license rehost process would not revoke the licenses on the old Firesight/FMC, right? Just try to minimize any network outage from order of operation perspective.

Also do you recommend to covert classic licenses to smart licenses once they are on the new FMC? 

[Marvin Rhoads]

The rehost won't affect the current (old) FMC licenses. It's sort of an "honor system" when you rehost classic licenses.

I don't see any advantage to the smart licenses. I'm not positive they're available for the Firepower service modules (I don't think they are). FTD uses them. You can mix both types on a given FMC.