Cisco Cisco Firepower Management Center 4000

the FireSIGHT System Virtual Installation Guide, which includes information about installing, 
managing, and troubleshooting virtual devices and virtual Defense Centers

the Sourcefire Software for  X-Series Installation and Configuration Guide, which includes 
information about installing, managing, and troubleshooting Sourcefire Software for  X-Series 

various API guides and supplementary material

This documentation includes information about which FireSIGHT System licenses and appliance 
models are required for each feature, and which user roles have permission to complete each procedure. 
For more information, see the following sections:

The License statement at the beginning of a section indicates the license required to use the feature 
described in the section, as follows:

A FireSIGHT license is included with your Defense Center and is required to perform host, 
application, and user discovery. The FireSIGHT license on your Defense Center determines how 
many individual hosts and users you can monitor with the Defense Center and its managed devices, 
as well as how many users you can use to perform user control. 

If your Defense Center was previously running Version 4.10.x, you may be able to use legacy RNA 
Host and RUA User licenses instead of a FireSIGHT license.

A Protection license allows managed devices to perform intrusion detection and prevention, file 
control, and Security Intelligence filtering.

A Control license allows managed devices to perform user and application control. It also allows 
devices to perform switching and routing (including DHCP relay), NAT, and to cluster devices and 
stacks. A Control license requires a Protection license.

A URL Filtering license allows managed devices to use regularly updated cloud-based category and 
reputation data to determine which traffic can traverse your network, based on the URLs requested 
by monitored hosts. A URL Filtering license requires a Protection license.