Cisco Cisco FirePOWER Appliance 8250
52-2
FireSIGHT System User Guide
Chapter 52 Licensing the FireSIGHT System
Understanding Licensing
•
•
•
•
•
License Types and Restrictions
License:
Any
This section describes the types of licenses available in a FireSIGHT System deployment. The licenses
you can enable on an appliance depend on its model, version, and (for managed devices) the other
licenses enabled.
you can enable on an appliance depend on its model, version, and (for managed devices) the other
licenses enabled.
For virtual and Series 3 devices, licenses are model specific; you cannot enable a license on a managed
device unless the license exactly matches the device’s model. For example, you cannot use a 3D8250
Protection license to enable Protection capabilities on a 3D8140 device. As your organization and
deployment grow, you can purchase additional licenses for additional managed devices.
device unless the license exactly matches the device’s model. For example, you cannot use a 3D8250
Protection license to enable Protection capabilities on a 3D8140 device. As your organization and
deployment grow, you can purchase additional licenses for additional managed devices.
Series 2 devices automatically have Protection capabilities (with the exception of Security Intelligence
filtering). Although you do not need to explicitly enable Protection on Series 2 devices, you also cannot
enable any other licenses.
filtering). Although you do not need to explicitly enable Protection on Series 2 devices, you also cannot
enable any other licenses.
Also note that although you can enable Control on a virtual device, Sourcefire Software for X-Series,
or ASA FirePOWER device to perform user and application control, these devices do not support
switching, routing, stacking, or clustering.
or ASA FirePOWER device to perform user and application control, these devices do not support
switching, routing, stacking, or clustering.
The following table summarizes FireSIGHT System licenses.
Table 52-1
FireSIGHT System Licenses
License
Platforms
Granted Capabilities
Requires
FireSIGHT
Defense Centers
discovery
none
RNA Host and RUA User
(legacy)
(legacy)
Defense Centers
discovery
none
Protection
(licensed)
Series 3, Virtual, X-Series,
ASA FirePOWER
ASA FirePOWER
intrusion detection and prevention
file control
Security Intelligence filtering
none
Protection (automatic)
Series 2
intrusion detection and prevention
file control
none
Control
Virtual, X-Series,
ASA FirePOWER
ASA FirePOWER
user and application control
Protection
Control
Series 3
user and application control
switching and routing
clustering
Protection
Malware
Series 3, Virtual, X-Series,
ASA FirePOWER
ASA FirePOWER
advanced malware protection (network-based
malware detection and blocking)
malware detection and blocking)
Protection