Cisco Cisco Firepower Management Center 4000

Note that the DC500 Defense Center does not support the capabilities provided by a URL Filtering or 
Malware license; note also that on a Series 2 device, you can only enable Protection capabilities.

For more information, see:

FireSIGHT

A FireSIGHT license is included with your Defense Center and allows you to perform host, application, 
and user discovery. Discovery data allows the system to create a complete, up-to-the-minute profile of 
your network, and correlate threat, endpoint, and network intelligence with user identity information. 
You can use discovery data to perform traffic profiling, assess network compliance, and implement 
correlation policies.

Your FireSIGHT license also determines how many individual hosts and users you can monitor with the 
Defense Center and its managed devices. Note that the user limit applies independently to the following:

the Users database, which contains a record for each user detected by the FireSIGHT System

the number of users you can use in access control rules to perform user control, also called 
access-controlled users

For information on the consequences of reaching the licensed limit, see 

.

Without a FireSIGHT license, you can still perform basic system configuration, monitoring, 
network-based access control (zone, network, VLAN, and port rule conditions), connection logging, and 
reporting. Additionally, you can receive endpoint-based malware events from the Collective Security 
Intelligence Cloud without a FireSIGHT license, although your organization does need a FireAMP 
subscription.

The License statements in this guide assume your Defense Center has a FireSIGHT license. However, if 
the Defense Center was previously running Version 4.10.x, you may be able to use legacy RNA Host and 
RUA User licenses instead of a FireSIGHT license. For more information, see 

.

URL Filtering

Series 3, Virtual, X-Series, 
ASA FirePOWER

category and reputation-based URL filtering

Protection

VPN

Series 3

deploying virtual private networks

Control