Cisco Cisco Firepower Management Center 4000

Any

This section describes the types of licenses available in a FireSIGHT System deployment. The licenses 
you can enable on an appliance depend on its model, version, and (for managed devices) the other 
licenses enabled.

For virtual and Series 3 devices, licenses are model specific; you cannot enable a license on a managed 
device unless the license exactly matches the device’s model. For example, you cannot use a 3D8250 
Protection license to enable Protection capabilities on a 3D8140 device. As your organization and 
deployment grow, you can purchase additional licenses for additional managed devices.

Series 2 devices automatically have Protection capabilities (with the exception of Security Intelligence 
filtering). Although you do not need to explicitly enable Protection on Series 2 devices, you also cannot 
enable any other licenses.

Also note that although you can enable Control on a virtual device, Sourcefire Software for  X-Series, 
or ASA FirePOWER device to perform user and application control, these devices do not support 
switching, routing, stacking, or clustering.

The following table summarizes FireSIGHT System licenses.

FireSIGHT

Defense Centers

discovery

none

RNA Host and RUA User 
(legacy)

Defense Centers

discovery

none

Protection

 

(licensed)

Series 3, Virtual, X-Series, 
ASA FirePOWER

intrusion detection and prevention

file control

Security Intelligence filtering

none

Protection (automatic)

Series 2

intrusion detection and prevention

file control

none

Control

Virtual, X-Series, 
ASA FirePOWER

user and application control

Protection

Control

Series 3

user and application control

switching and routing

clustering

Protection

Malware

Series 3, Virtual, X-Series, 
ASA FirePOWER

advanced malware protection (network-based 
malware detection and blocking)

Protection