Security contexts for Fire Power 9300

[Kavya R]

Hi Team,

I would like to get more insights on how we can order security modules and security contexts for Cisco Fire power.

As per the ordering guide given below, the base license L-F9K-ASA(=) includes the following security contexts by default: 10 security contexts for Firepower 9300, 10 security contexts for Firepower 4100 Series, 10 security contexts for Secure Firewall 4200, 2 security contexts for Secure Firewall 3100 Series and 2 security contexts for Firepower 1000 Series.

Cisco Network Security Ordering Guide - Cisco 

So, when we order the security module SM-48 separately (FPR9K-SM-48=) ,will this have 10 security contexts added by default? or do we need to add SKU L-F9K-ASA= while ordering in CCW tool?

Please help to provide clarification on this. Really appreciate any kind of inputs here please.

[Marvin Rhoads]

You need to add SKU L-F9K-ASA= and specify under the options for it "L-F9K-ASA-SC-10".

It is not included with an SM.

[Kavya R]

Hi @Marvin Rhoads,

Thanks for the reply.

When it is given as the base license L-F9K-ASA(=) includes the following security contexts by default: 10 security contexts for Firepower 9300, 10 security contexts for Firepower 4100 Series, 10 security contexts for Secure Firewall 4200, 2 security contexts for Secure Firewall 3100 Series and 2 security contexts for Firepower 1000 Series, this does not mean that it comes free of charge by default ?? Default doesn't mean free of cost. Am I right here? 

So basically if we want to procure security contexts for Firepower 9300, then it has to be procured by ordering L-F9K-ASA(=) or we can also go with L-F9K-ASA-SC-10= also. Is my understanding correct?

Suppose in a case where we need to purchase 2 x Cisco FirePower 9300 SM-48 with 20 security contexts, do we need to specifically add either L-F9K-ASA(=)(by specifying L-F9K-ASA-SC-10 with 2 quantities) or L-F9K-ASA-SC-10= x 2 along with 2x FPR9K-SM-48= ?

Please help to confirm on the above.

Also when trying to select L-F9K-ASA-SC-10 inside L-F9K-ASA(=) with quantity 25, there is an error as "A maximum of 24 L-F9K-ASA-SC-10 is allowed. Please adjust the quantity." As per the datasheet, Cisco Firepower 9300 Series Data Sheet - Cisco, the quantity is as per below - included 10 and maximum is 250. But while selecting it under L-F9K-ASA(=) we can only select 24 i.e 240 security contexts. So, where is the remaining 10 security context?

Security contexts (included; maximum)

10; 250

[Marvin Rhoads]

Sorry, it does indeed look like 10 are "built-in" and not listed as a separate licenses in the ordering tool.

So, if you require 20 total you would use the 10 included with the base unit plus an additional L-F9K-ASA-SC-10=.

If you need additional confirmation, you can open a Partner Help case at www.cisco.com/go/ph

You can login there with partner level access and scroll down to Presales help and open a case with Global Virtual Engineering (GVE).

[Kavya R]

Hi @Marvin Rhoads.,

Thanks for your time and the reply

When you mentioned that "if you require 20 total you would use the 10 included with the base unit plus an additional L-F9K-ASA-SC-10=", what is this base unit? Is this the FPR9K-SM-48= (or can be any spare security module) or the bundle unit FPR9K-FTD-BUN (Cisco FPR9300 FTD Bundles for Security Modules) or is this base unit something else which we can order in CCW?

I will try to raise a case on this but meanwhile if you can provide any insights on this query, it is much appreciated.

[Marvin Rhoads]

As I understand it, the ones included in the base unit are not a separate license. That's why you do not see the context license SKU on a CCW order. They should instead just show up when you use "show version".

[Kavya R]

Noted. Thanks for your assistance @Marvin Rhoads .