Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Cisco ASA 5500 Series Content Security Edition Licensing and Subscriptions

  • Viewing Options

  • PDF (73.1 KB)
  • Feedback

Licensing

Q. What does each Cisco ® ASA 5500 Series Content Security Edition license entitle you to?
A. Depending on the license type, customers are entitled to the following:

• Base licenses: Antivirus and antispyware functionality for the number of users licensed; pattern file, scan engine updates, and software updates for the first year.

• Plus licenses: URL filtering and blocking, antispam, antiphishing, and content filtering functionality for the number of users licensed; pattern file, scan engine updates, and major and minor software updates for the first year.

• User licenses: The right to perform the Base and Plus (if applicable) functionality for the number of users licensed. For licensing purposes, users are considered to be the total number of nonconcurrent users whose traffic is being scanned and/or protected by the module.

Q. How do I upgrade the user licenses or upgrade to a Plus license?
A. You should purchase the appropriate user upgrade license (from 50 to 100 users, for example) or Plus upgrade license. You will receive a Product Activation Key (PAK) when the order is fulfilled. Per the enclosed instructions, you should visit http://www.cisco.com/go/license, where you will be prompted to enter your contact information and PAK number along with the serial number of your module. The software on the Content Security Edition module will be enabled for the new user count and/or Plus functionality automatically and transparently the next time it checks for updates.
Q. How can I verify that the license upgrade took effect?
A. You can click on Administration > Product License in the Content Security section of the Cisco Adaptive Security Device Manager. If the license details do not appear to reflect the upgrade, you should click Check Status Online to query the license entitlement database. The screen should reflect the upgrade.
Q. How does the user count get updated after I purchase a user upgrade license?
A. When you register the user upgrade license, the back-end system automatically updates the user count for the license.

Licensing Renewals and Expirations

Q. How do I renew my subscription/s?
A. You should purchase software subscription service licenses through your Cisco partner as early in advance as feasible for your currently licensed Base, Plus, and user counts. The renewal process is much like the upgrade process: you will receive a PAK when the renewal order is fulfilled. When you register it, the product will be renewed seamlessly the next time it checks for updates from Trend Micro. You do not need a new activation code to renew the subscription.
Q. What happens if the Cisco ASA 5500 Series Content Security Edition license expires before a renewal can be completed?
A. Once a license expires, you are provided with a 30-day grace period, during which you continue to receive all the benefits of active licenses. After the 30-day grace period, the product will cease to retrieve any updates and the URL filtering functionality will allow all URLs unfiltered.
Q. Why is it important to keep licenses up-to-date?
A. Once the product's licenses and the 30-day grace period have expired, the product will become progressively out of date the more time passes. This means that it will not have knowledge of the latest threats and will therefore be incapable of defending against them. It is critical that renewals be purchased and registered as early as possible to continue to receive the most comprehensive and timely protection from the Cisco ASA 5500 Series Content Security Edition.
Q. How do I verify that the renewal registration took effect?
A. You can click on Administration > Product License in the Content Security section of the Cisco Adaptive Security Device Manager. If the license details do not appear to reflect the extended expiration date, you should click Check Status Online to query the license entitlement database. The screen should reflect the change.
Q. What is the difference between a software update service and Cisco Services for IPS?
A. Although both services provide signature updates, the signatures provided are for different products. Adaptive security appliances with a Content Security and Control Security Services Module (CSC SSM) should be covered by a Cisco SMARTnet ® and software update service. There is no need for Cisco Services for IPS.

Adaptive security appliances with an Advanced Inspection and Prevention Security Services Module (AIP SSM) must be covered by Cisco Services for IPS. There is no need for the software update service.

Q. Does my Cisco SMARTnet contract cover the Cisco ASA 5500 Content Security Edition license renewal?
A. No. The Cisco SMARTnet contract provides only the chosen level of technical support service that gives access to Cisco support engineers and an extensive range of technical resources. The Content Security Edition license is a license for pattern file, URL lists, scan engines, and software updates, and it must be renewed separately.
Q. How do I find the serial number of the Cisco ASA 5500 Content Security Edition module?
A. You can use the command show mod at the command line interface (CLI) and the module's serial number will be included in the information displayed.
Q. Is it possible to assign the various licenses the same expiration dates if they have been registered at different times?
A. No. At this time there is no way of co-terminating licenses once they have been registered.
Q. How can I update the contact information in the license registration database?
A. The contact information will be updated when you renew the licenses by registering the renewal Product Authorization Key (PAK). There is currently no way to update the contact information outside of the registration event.
Q. Can a license be reactivated (renewed) if it expires?
A. Yes. The reactivated (renewed) license is automatically renewed with the appropriate expiration date based on the registration date of the renewal Product Authorization Key (PAK).
Q. How can I find the number of users for which a module is licensed?
A. You can click the Content Security tab in the Cisco Adaptive Security Device Manager to open the CSC SSM Information box. The Licensed Nodes number represents the number of users.
Q. How can I purchase a renewal for more than two years?
A. You can combine multiple renewal part numbers for more than 2-year situations. For example, combine a 2-year renewal with a 1-year renewal for 3 years of service.
Q. How can I contact someone if I have questions or concerns about the renewals or how they are handled?
A. You can send an e-mail to the content security renewals team.