Thank you Francesco! ... View more

Hi Francesco, Does this license run out? Is it just active for a certain period and then stops working?   Regards. ... View more

Thank you very much! ... View more

Hi, Yes, I'm aware that you buy a FMC with a certain ammount of licenses for the number of the devices that it should manage. What I meant was are some licenses required on the 2100 so that it can me managed by a FMC? Like connect license? Regards. ... View more

Thank you very much for clearing that up. It's definitely confusing.  And what about management? The devices should be managed through a regular Firepower management server right? Are additional licenses required for this (for the management through a Firepower management server )? Can the same firepower management server manage ASA 5545 with firepower and 2100 firewalls? Regards. ... View more

Hi @Ajay Saini If I select FPR2130-NGFW-K9 as the hardware then under subscription I only have this options: -L-FPR2130T-T= - Threat Defense Threat Protection License -L-FPR2130T-TM= - Threat Defense Threat and Malware License -L-FPR2130T-TC= - Threat Defense Threat and URL License -L-FPR2130T-TMC= - Threat Defense Threat, Malware and URL License (See attached screenshot) So no option for IPS? Which one of the licenses would cover everything (IPS, Malware, URL filtering)?   Regards. ... View more

Hi @Ajay Saini I need to use it with all the licenses (TAMC). Question is how do I use it in NGIPS mode? If I select top Part number: FPR2130-BUN then I only have two options to select for hardware: -FPR2130-NGFW-K9 and  -FPR2130-ASA-K9  (see the attached screenshot). So no option for NGIPS.    If on the other hand I select FPR4110-BUN as top part number then there is an option to add  FPR4110-NGIPS-K9 as hardware.   Hence my question here: Is NGIPS mode supported on 2100 series (like the documentation says it is) or is it only available on the 4100 series?   Regards. ... View more

After regenerating the certs I was able to start the services. Thank you very much! ... View more

Thank you Deepak, The procedure you sent is for changing CallManager, ipsec, tomcat, TVS and CAPF. I really see all those are expired on our servers. If I understood correctly this needs to be done on both servers? -Will this impact the phones? -Should I upload some certificates from the publisher on the subscriber and the other way arround? I read somewhere that after regenerating some of the certs have to be uploaded on the other servers to establish trust? ... View more

Hi Jaime, Yes, I restarted the services and also both servers but that didn't help. I found another thread where certificates are pointed out as a cause for this behaviour. When I see the certificates I do see that some of them have expired. For instance the ipsec and the tomcat certificates on both the publisher and the subscriber but this worked before the upgrade. ... View more