Security Cloud Control Firewall Management requires a base subscription and device licenses to manage firewalls and supported devices. Choose term-based plans to match your deployment needs, access software updates, and receive Cisco TAC support. Catalyst SD-WAN doesn't require an additional license; customers using Cisco Digital Network Architecture (DNA) or WAN Essentials license can integrate with Security Cloud Control Firewall Management.
Security Cloud Control Firewall Management requires a base subscription for organization entitlement and device licenses for managing devices. You can buy one or more Security Cloud Control Firewall Management base subscriptions based on the number of tenants you require and device licenses based on the device model number and the quantity. In other words, purchasing the base subscription provides you with a Security Cloud Control Firewall Management organization. For every device you choose to manage using Security Cloud Control Firewall Management, you need separate device licenses.
To onboard and manage devices from Security Cloud Control Firewall Management, you must purchase a base subscription and device-specific, term-based subscriptions based on the devices you want to manage.
Subscriptions
Security Cloud Control Firewall Management subscriptions are term-based:
-
Base: Offers subscriptions for one, three, and five years, and provides entitlement to access the Security Cloud Control Firewall Management organization and onboard adequately licensed devices.
-
Device License: Offers subscriptions for one, three, and five years for any supported device you choose to manage. For example, you can choose to manage a Cisco Firepower 1010 device using Security Cloud Control Firewall Management for three years if you purchase a three-year software subscription for the Cisco Firepower 1010 device.
When managing your firewalls with Security Cloud Control Firewall Management, you can combine Security Analytics and Logging with your Security Cloud Control Firewall Management subscription, or you can obtain Security Analytics and Logging entitlement as a separate subscription. For more information about Security Analytics and Logging subscriptions, see Security Analytics and Logging licenses.
You do not require two separate device licenses to manage a high-availability device pair in Security Cloud Control Firewall Management. If you have a high-availability pair, purchasing one device license is sufficient because Security Cloud Control Firewall Management considers the pair of high-availability devices as one single device.
Catalyst SD-WAN does not require an additional license for integration with Security Cloud Control Firewall Management. Customers with Cisco Digital Network Architecture (DNA) or WAN Essentials licenses can use these existing licenses for integration without needing any other license.
Customers with Cisco Digital Network Architecture (DNA) Essentials or Advantage, as well as WAN Essentials or Advantage licenses, can use these existing licenses for integration without needing any other license. However, to access Security Analytics and Logging, a DNA Advantage (or WAN Advantage) license is required along with a separate Security Analytics and Logging license.
You cannot manage Security Cloud Control Firewall Management licensing through the Cisco Smart Licensing portal.
Software Subscription Support
The Security Cloud Control Firewall Management base subscription includes software subscription support that is valid for the term of the subscription and provides access to software updates, major upgrades, and Cisco Technical Assistance Center (TAC) at no extra cost. While software support is selected by default, you can also leverage Security Cloud Control Firewall Management solution support based on your requirement.