The ASA uses Cisco Smart Software Licensing. You can use regular Smart Software Licensing, which requires internet access;
or for offline management, you can configure Permanent License Reservation or a Satellite server. For more information about
these offline licensing methods, see Cisco ASA Series Feature Licenses; this guide applies to regular Smart Software Licensing.
For the ASA on the Firepower 9300, Smart Software Licensing configuration is split between FXOS on the chassis and the ASA.
Firepower 9300—Configure all Smart Software Licensing infrastructure in FXOS, including parameters for communicating with the License Authority.
The Firepower 9300 itself does not require any licenses to operate.
ASA—Configure all license entitlements in the ASA.
When you register the chassis, the License Authority issues an ID certificate for communication between the chassis and the
License Authority. It also assigns the chassis to the appropriate virtual account. Until you register with the License Authority,
you will not be able to make configuration changes to features requiring special licenses, but operation is otherwise unaffected.
Licensed features include:
Carrier—Diameter, GTP/GPRS, SCTP
Strong Encryption (3DES/AES)
AnyConnect—AnyConnect Plus, AnyConnect Apex, or AnyConnect VPN Only.
When you request the registration token for the ASA from your Smart Software Licensing account, check the Allow export-controlled functionality on the products registered with this token check box so that the full Strong Encryption license is applied (your account must be qualified for its use). The Strong
Encryption license is automatically enabled for qualified customers when you apply the registration token on the chassis,
so no additional action is required.
Strong encryption is required for ASDM access.