Skip to main content

 

 

Cisco Defense Orchestrator

Applying or Updating a Smart License

Applying a New Smart License to an FTD Device

Perform one of the following procedures to Smart License the Firepower Threat Defense (FTD) device:

  • Smart license an FTD device when onboarding using a registration key.
  • Smart license an FTD device after onboarding the device using a registration key or the administrator's credentials.

Note: The FTD device may be using a 90-day evaluation license, or the license could be unregistered. 

FTDv Tiered Licenses in Version 7.0  

Version 7.0 supports performance-tiered Smart Licensing for virtual FTD (FTDv) devices based on throughput requirements and RA VPN session limits. When the FTDv is licensed with one of the available performance licenses, two things occur: session limits for RA VPNs are determined by the installed FTDv platform entitlement tier, and enforced via a rate limiter. 

CDO does not fully support tiered smart licensing at this time; see the following limitations:

  • You cannot modify the tiered license through CDO. You must make the changes in the FDM UI. See Managing Smart Licenses for more information. 
  • If you register an FTDv to CDO for cloud services, the tiered license selection automatically resets to Variable, which is the default tier.
  • If you onboard an FTDv running 7.0 and select a license that is not a default license during the onboarding process, the tiered license selection automatically resets to Variable, which is the default tier. 

We strongly recommend selecting a tier for your FTDv license after onboarding your device to avoid the issues listed above.

Smart-License an FTD Device When Onboarding Using a Registration Key

Note: If you onboarded an FTDv running Version 7.0 and smart-licensed the device during the onboarding process, you must manually re-select the tiered-performance smart license in the FDM UI. 

  1. Log on to the Cisco Smart Software Manager and generate a new Smart License key. Copy the newly generated key. You can watch the Generate Smart Licensing video for more information. 

smart_license_inventory.jpg

  1. Begin onboarding an FTD using a registration key. For more information, see Onboard an FTD Running Software Version 6.6+ Using a Registration Key or Onboard an FTD Running Software Version 6.4 or 6.5 Using a Registration Key.
  2. In step 4 of the onboarding wizard, in the Smart License here box, paste the Smart License in the Activate field and click Next

FTD_Smart_License.jpg

  1. Click Go to devices page to go to the Devices & Services page and see the progress of the onboarding process.  
    The device starts synchronizing and applies the Smart License. 
  2. Open the Devices & Services page. You should see that the device is now in the Online connectivity state. 

If the device is not in the online connectivity state, look in the Device Actions pane on the right and click Manage Licenses > Refresh Licenses to update the connectivity state.

  1. After applying the Smart License successfully to the FTD device, click the Manage Licenses. The device status shows "Connected, Sufficient License." You can enable or disable the optional licenses. For more information, see FTD Smart Licensing Types.

manage_licenses_button.jpg

Smart-License an FTD Device After Onboarding the Device Using a Registration Key or its Credentials

  1. In the navigation pane, click Devices & Services and select the FTD device that you want to license.
  2. In the Device Actions pane on the right, click Manage Licenses.

manage_licenses_button.jpg

  1. Follow the on-screen instructions and enter the Smart License generated from Cisco Smart Software Manager.
  2. Paste the new license key in the box and click Register Device. After synchronizing with the device, the connectivity state changes to 'Online'. 
    After applying the Smart License successfully to the FTD device, the device status shows "Connected, Sufficient License." You can enable or disable the optional licenses. For more information, see FTD Smart Licensing Types.

​​​​​​​Note: If you onboarded an FTDv running Version 7.0 and smart-licensed the device during the onboarding process, you must manually re-select the tiered-performance smart license in the FDM UI. 

Updating an Existing Smart License of an FTD Device

You can apply a new Smart License to an FTD device which is Smart Licensed. Based on the method you have selected for onboarding your device, select the appropriate procedure:  

Change the Smart License Applied to an FTD Device Onboarded Using a Registration Key

Use the following procedure:

  1. Remove the corresponding FTD device from CDO.
  2. Log into the Firepower Device Manager (FDM) for that FTD and unregister the Smart License. For more information, see Unregister the Smart Licensed FTD.
  3. In CDO, onboard the FTD device again using a registration key. For more information, see Onboard an FTD with a Registration Key.
  4. Apply the new Smart License during the onboarding process or by looking in the Device Actions pane on the right and clicking Manage Licenses

manage_licenses_button.jpg

Change the Smart License Applied to an FTD Device Onboarded Using its Credentials

  1. Log into the Firepower Device Manager (FDM) for that FTD and unregister the Smart License. For more information, see Onboard an FTD with a Registration Key.
  2. Apply the new Smart License to the FTD device on FDM. 
    1. In the Smart License area, click View Configuration.
    2. Click Register Now and follow the onscreen instructions.
  3. On the Devices & Services page in CDO, check the FTD configuration for changes so that CDO can make a copy of the FTD's deployed configuration and save it to CDO's own database. For more information, see Reading, Discarding, Checking for, and Deploying Configuration Changes.