Security contexts for Fire Power 9300

[Kavya R]

Hi Team,

I would like to get more insights on how we can order security modules and security contexts for Cisco Fire power.

As per the ordering guide given below, the base license L-F9K-ASA(=) includes the following security contexts by default: 10 security contexts for Firepower 9300, 10 security contexts for Firepower 4100 Series, 10 security contexts for Secure Firewall 4200, 2 security contexts for Secure Firewall 3100 Series and 2 security contexts for Firepower 1000 Series.

Cisco Network Security Ordering Guide - Cisco 

So, when we order the security module SM-48 separately (FPR9K-SM-48=) ,will this have 10 security contexts added by default? or do we need to add SKU L-F9K-ASA= while ordering in CCW tool?

Please help to provide clarification on this. Really appreciate any kind of inputs here please.

[Marvin Rhoads]

You need to add SKU L-F9K-ASA= and specify under the options for it "L-F9K-ASA-SC-10".

It is not included with an SM.

[Kavya R]

Hi @Marvin Rhoads,

Thanks for the reply.

When it is given as the base license L-F9K-ASA(=) includes the following security contexts by default: 10 security contexts for Firepower 9300, 10 security contexts for Firepower 4100 Series, 10 security contexts for Secure Firewall 4200, 2 security contexts for Secure Firewall 3100 Series and 2 security contexts for Firepower 1000 Series, this does not mean that it comes free of charge by default ?? Default doesn't mean free of cost. Am I right here? 

So basically if we want to procure security contexts for Firepower 9300, then it has to be procured by ordering L-F9K-ASA(=) or we can also go with L-F9K-ASA-SC-10= also. Is my understanding correct?

Suppose in a case where we need to purchase 2 x Cisco FirePower 9300 SM-48 with 20 security contexts, do we need to specifically add either L-F9K-ASA(=)(by specifying L-F9K-ASA-SC-10 with 2 quantities) or L-F9K-ASA-SC-10= x 2 along with 2x FPR9K-SM-48= ?

Please help to confirm on the above.

Also when trying to select L-F9K-ASA-SC-10 inside L-F9K-ASA(=) with quantity 25, there is an error as "A maximum of 24 L-F9K-ASA-SC-10 is allowed. Please adjust the quantity." As per the datasheet, Cisco Firepower 9300 Series Data Sheet - Cisco, the quantity is as per below - included 10 and maximum is 250. But while selecting it under L-F9K-ASA(=) we can only select 24 i.e 240 security contexts. So, where is the remaining 10 security context?

Security contexts (included; maximum)

10; 250

[Marvin Rhoads]

Sorry, it does indeed look like 10 are "built-in" and not listed as a separate licenses in the ordering tool.

So, if you require 20 total you would use the 10 included with the base unit plus an additional L-F9K-ASA-SC-10=.

If you need additional confirmation, you can open a Partner Help case at www.cisco.com/go/ph

You can login there with partner level access and scroll down to Presales help and open a case with Global Virtual Engineering (GVE).

[Kavya R]

Hi @Marvin Rhoads.,

Thanks for your time and the reply 🙂

When you mentioned that "if you require 20 total you would use the 10 included with the base unit plus an additional L-F9K-ASA-SC-10=", what is this base unit? Is this the FPR9K-SM-48= (or can be any spare security module) or the bundle unit FPR9K-FTD-BUN (Cisco FPR9300 FTD Bundles for Security Modules) or is this base unit something else which we can order in CCW?

I will try to raise a case on this but meanwhile if you can provide any insights on this query, it is much appreciated.

[Marvin Rhoads]

As I understand it, the ones included in the base unit are not a separate license. That's why you do not see the context license SKU on a CCW order. They should instead just show up when you use "show version".

[Kavya R]

Noted. Thanks for your assistance @Marvin Rhoads .