License Requirements - Cisco ASA 5508-X Quick Start Manual

Cisco ASA 5508-X and ASA 5516-X Quick Start Guide

2. License Requirements

ASA Licenses
The ASA 5508-X or ASA 5516-X includes the Base license by default, along with the Strong Encryption
(3DES/AES) license if you qualify for its use. You can also purchase the following licenses:

Security Context

AnyConnect Plus or Apex
If you need to manually request the Strong Encryption license (which is free), see
http://www.cisco.com/go/license.
If you want to upgrade from the Base license to the Security Plus license, or purchase an AnyConnect license, see
http://www.cisco.com/go/ccw. See also the
Frequently Asked Questions
can obtain the license activation key. For the AnyConnect licenses, you receive a multi-use PAK that you can apply
to multiple ASAs that use the same pool of user sessions.
Note: The serial number used for licensing is different from the chassis serial number printed on the outside of
your hardware. The chassis serial number is used for technical support, but not for licensing. To view the licensing
serial number, enter the show version | grep Serial command or see the ASDM Configuration > Device
Management > Licensing Activation Key page.
ASA FirePOWER Licenses
The ASA FirePOWER module uses a separate licensing mechanism from the ASA. No licenses are pre-installed,
but the box includes a PAK on a printout that lets you obtain a license activation key for the following licenses:

Control and Protection—Control is also known as "Application Visibility and Control (AVC)" or "Apps".
Protection is also known as "IPS". In addition to the activation key for these licenses, you also need
"right-to-use" subscriptions for automated updates for these features.
The Control (AVC) updates are included with a Cisco support contract.
The Protection (IPS) updates require you to purchase the IPS subscription from
http://www.cisco.com/go/ccw. This subscription includes entitlement to Rule, Engine, Vulnerability, and
Geolocation updates.
activation key for the ASA FirePOWER module; it just provides the right to use the updates.
Other licenses that you can purchase include the following:

Advanced Malware Protection (AMP)

URL Filtering
These licenses do generate a PAK/license activation key for the ASA FirePOWER module. See the
System Feature Licenses
To install the Control and Protection licenses and other optional licenses, see
Deploy the ASA 5508-X or ASA 5516-X in Your
3.
Network
The following figure shows the recommended network deployment for the ASA 5508-X or ASA 5516-X with the
ASA FirePOWER module:
Cisco AnyConnect Ordering Guide
(FAQ). You will then receive an email with a Product Authorization Key (PAK) so you
Note: This right-to-use subscription does not generate or require a PAK/license
for more information.
2. License Requirements
and the AnyConnect Licensing
Cisco Firepower
Install the Licenses, page 6.
2