Firepower System Feature Licenses

The Cisco Firepower System Feature License type required depends on the software running on the device. FTD devices use Smart licenses, while all other devices use Classic licenses. FMC hardware does not require a license, but a virtual Firepower Management Center (FMCv) requires an entitlement for each device it will manage. For Firepower hardware that is not running Firepower software, see the documentation for your software product.

Firepower Management Center Licensing

Management Center Hardware Model or Virtual Platform

License Requirements

Firepower Management Center hardware (all models)

No license is required for FMC hardware.

FMC can manage devices that use both Smart and Classic licenses.

Firepower Management Center virtual (all platforms)

A virtual Firepower Management Center requires an entitlement for each device it will manage, whether the devices use Smart or Classic licensing.

Required License Type (Smart or Classic) for Firepower Devices

Generally, it is the software, not the hardware, that determines whether your device requires a Classic or Smart License.


Important

Some hardware supports either Classic or Smart Licenses, depending on the software running on the device. Make sure you purchase and activate the correct license type for your software.

For details, see licensing information for the software product that will run on the device.

If you activate the wrong license type, contact Cisco TAC.


Use the information below to determine whether your Firepower product requires Classic or Smart Licenses.

Table 1. Summary: Required License Type for Firepower Devices

Software

Required License Type

Firepower Threat Defense

Smart

ASA with FirePOWER Services

Classic

All other devices running Firepower software

Classic

ASA without FirePOWER Services

See the documentation for your ASA software.

Table 2. Required License Type by Hardware or Virtual Device Model

Device Hardware Model or Virtual Platform

Firepower Software (NGIPS)

Firepower Threat Defense Software

ASA FirePOWER Software

ASA Software Without FirePOWER Services

Cisco NGIPS for Blue Coat X-Series

Classic

See the important note in the next section.

3D500, 3D1000, 3D2000

3D2100, 3D2500, 3D3500, 3D4500, 3D6500 (EOL)

3D9900 (EOL)

Classic

See the important note in the next section.

Firepower 7010, 7020, 7030, 7050

Firepower 7110, 7115 7120, 7125

AMP7150

Classic

See the important note in the next section.

Firepower 8120, 8130, 8140

Firepower 8250, 8260, 8270, 8290

Firepower 8350, 8360, 8370, 8390

AMP8050, AMP8150, AMP8350

Classic

See the important note in the next section.

Virtual: VMware

Classic

Smart

See the important note in the next section.

Virtual: AWS

Smart

See the important note in the next section.

Virtual: KVM

Smart

See the important note in the next section.

Virtual: Azure

Smart

See the important note in the next section.

ASA 5506-X, ASA 5506H-X, ASA 5506W-X, ASA 5508-X, ASA 5516-X

Smart

Classic

See the important note in the next section.

ISA 3000

For supported software versions on this hardware, see the Compatibility Matrix at https://www.cisco.com/c/en/us/support/security/defense-center/products-device-support-tables-list.html.

Smart

Versions 6.2.3 and 6.3 support Threat license only.

Support for Specific License Reservation was introduced in 6.4.

Classic

See the important note in the next section.

ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, ASA 5555-X

Smart

Classic

See the important note in the next section.

ASA 5585-X-SSP-10, -20, -40, -60

Classic

See the important note in the next section.

Firepower 1000 Series

Firepower 1100 Series

Firepower 2100 Series

Firepower 4100 Series

Firepower 9300

Smart

See the important note in the next section.

Licensing Instructions by Firepower Version

Use this table to find feature license instructions by Firepower version.


Important

For Firepower hardware that is not running Firepower software, see the documentation for the software product.

For example, for licensing information for Firepower hardware running Cisco Adaptive Security Appliance (ASA) software without FirePOWER Services software, see https://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/licenseroadmap.html.


Firepower Software Version

Firepower Device Type

Licensing Information For

6.6

FTD

All others

6.5

FTD

All others

6.4

FTD

All others

6.3

FTD

All others

6.2.3

FTD

All others

6.2.2

FTD

All others

6.2.1

FTD

All others

6.2.0.x

FTD

All others

6.1.0.x

FTD

All others

6.0.1.x

FTD

Firepower Threat Defense devices, managed by the Firepower Management Center:

Licensing the Firepower System

All others

6.0.0.x

All except FTD

5.4.x

Classic

5.3.1.x

Classic

Licensing the FireSIGHT System

For Assistance

If you have any questions about installing or using Firepower feature licenses, contact TAC Support: