Configure Licensing
The ASA uses Cisco Smart Software Licensing. You can use regular Smart Software Licensing, which requires
internet access; or for offline management, you can configure Permanent License Reservation or a Satellite
server. For more information about these offline licensing methods, see Cisco ASA Series Feature Licenses;
this guide applies to regular Smart Software Licensing.
When you register the chassis, the License Authority issues an ID certificate for communication between the
chassis and the License Authority. It also assigns the chassis to the appropriate virtual account. Until you
register with the License Authority, you will not be able to make configuration changes to features requiring
special licenses, but operation is otherwise unaffected. Licensed features include:
• Standard
• Security Plus—For Active/Standby failover
• Strong Encryption (3DES/AES)
• AnyConnect—AnyConnect Plus, AnyConnect Apex, or AnyConnect VPN Only.
The ASA includes 3DES capability by default for management access only, so you can connect to the License
Authority and also use ASDM immediately. You can also use SSH and SCP if you later configure SSH access
on the ASA. Other features that require strong encryption (such as VPN) must have the Strong Encryption
license enabled, which requires you to first register to the License Authority.
If you attempt to configure any features that can use strong encryption before you have the license—even if
you only configure weak encryption—then your HTTPS connection will be dropped on that interface, and
you cannot reconnect. The exception to this rule is if you are connected to a management-only interface, such
as Management 1/1. SSH is not affected. If you lose your HTTPS connection, you can connect to the console
port to reconfigure the ASA, connect to a management-only interface, or connect to an interface not configured
for a strong encryption feature.
Note
When you request the registration token for the ASA from your Smart Software Licensing account, check the
Allow export-controlled functionality on the products registered with this token check box so that the
full Strong Encryption license is applied (your account must be qualified for its use). The Strong Encryption
license is automatically enabled for qualified customers when you apply the registration token on the chassis,
so no additional action is required.
Before you begin
• Have a master account on the Cisco Smart Software Manager.
If you do not yet have an account, click the link to set up a new account. The Smart Software Manager
lets you create a master account for your organization.
• Your Cisco Smart Software Licensing account must qualify for the Strong Encryption (3DES/AES)
license to use some features (enabled using the export-compliance flag).
Cisco Firepower 1010 Getting Started Guide
171
ASA Deployment with ASDM
Configure Licensing
To Next Page
Loading...
Need help?
General