Subscription licenses: Software with the right-to-use for the length of the subscription term. Subscription models generally provide faster access to our latest features and innovations and more predictable cost structures.
Perpetual licenses: Software with the right-to-use for an indefinite period of time. Perpetual licenses license are typically locked to the device, and additional annual fees are required to maintain support and maintenance.
Software Buying Programs: Purchasing through one of the Cisco’s Software Buying Programs provides you economies of scale and license management simplicity. Cisco’s Software Buying Programs provide financial predictability, access to incentives, and subscription co-termination.
Learn more about Buying Programs for Enterprise Agreement (EA), Managed Service License Agreement (MSLA), and Service Provider Networking Agreement (SPNA).
Transactional: Both perpetual and subscription licenses can also be purchased as à la carte in accordance with Cisco’s price list.
License Deployment and Management
Smart Software Licensing: Smart Software Licensing is a flexible licensing model that provides you with an easy, fast, and consistent way to purchase and manage software across the Cisco portfolio and your organization. It gives you visibility to what you have purchased and what you are using. It supports a complete view of your smart licensed software entitlements in a user-friendly portal.
PAK Licensing: Requires you to configure devices individually using a PAK (Product Activation Key) license key. This method does not easily provide you with visibility of licenses you own in aggregate because PAK license keys are either delivered as paper-based, with the device, or via email.
Cisco Firepower Firewall
|CISCO 1000 Firepower Firewall|
|CISCO 2100 Firepower Firewall|
|CISCO 3100 Firepower Firewall|
|CISCO 4100 Firepower Firewall|
|CISCO 9300 Firepower Firewall|
Most Cisco software is available in three tiers: Essentials, Advantage, and Premier, with incremental capabilities in each tier.
You can purchase subscriptions in monthly, 1-, 3-, 5- and 7-year terms based on offer.
We measure software consumption in three main categories: user, device, and capacity.
Get more value
Predictable billing. Co-termed renewals. Growth flexibility.
|Regulatory compliance||Products comply with CE markings per directives 2004/108/EC and 2006/108/EC|
● CAN/CSA-C22.2 No. 60950-1
● EN 60950-1
● IEC 60950-1
● AS/NZS 60950-1
|EMC: emissions||47CFR Part 15 (CFR 47) Class A (FCC Class A)
● AS/NZS CISPR22 Class A
● CISPR22 CLASS A
● EN55022 Class A
● ICES003 Class A
● VCCI Class A
● KN22 Class A
● CNS13438 Class A
● TVCN 7317
● EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6,EN-61000-4-8,
Product licensing by product type
Cisco ASA Virtual appliances
Cisco Smart Licensing
Cisco Secure Firewall Threat Defense Virtual appliances
Cisco Smart Licensing
Cisco Secure DDOS Protection (Radware vDefensePro) on Cisco Firepower 9300 and 4100 Series appliances
Supplied by Radware
Cisco Secure Firewall Management Center
Cisco Secure Firewall Management Center Virtual Appliance
Either Cisco PAK and Smart Licensing
Cisco Security Manager
Cisco PAK Licensing
Cisco Security Analytics and Logging
Either Cisco Smart Licensing or Classic License
Cisco ISE Passive Identity Connector (ISE-PIC)
Either Cisco Smart Licensing or Classic License
With the Cisco Smart License Manager, the customer can connect devices to the Smart Software Manager portal, so purchased licenses can be consumed as needed. These licenses can be relinquished back to the portal when a device is powered down or a user is finished using the license. With Smart Software Licensing, customers can easily check in and check out licenses to use on different platforms. Licenses are no longer locked to a specific platform.
A Smart Account can be created from Cisco Software Central. For more information on setting up a Smart Account, please refer to this Quick Reference Guide.
Cisco Secure DDOS Protection (Radware vDefensePro) Licensing
Licensing of the vDP and Vision will be administered directly by Radware. Once the order is shipped, Radware will send an email to the customer with their serial numbers. Please note the address of the person on the customer order who will receive the email. These serial numbers will be needed along with the MAC address for either vDP and/or Vision after installation. If the email with the serial numbers cannot be found, please open a TAC case to get them reissued. For detailed licensing instructions, please refer to the Radware Customer Onboarding and License Generation Instructions.
High Availability Pair Licensing
Cisco requires two (2) subscriptions for a High Availability (HA) pair of appliances running Firewall Threat Defense software image, which is configured for active-passive operation. The hardware models available with this optional configuration include:
●Cisco Firepower 1000 Series
●Cisco Firepower 2100 Series
●Cisco Secure Firewall 3100 Series
●Cisco Firepower 4100 Series
●Cisco Firepower 9300 Series
We now offer specially configured bundle SKUs that enable the purchase of a high availability pair of appliances and software subscriptions that includes 50% discounted pricing for the second software subscription in the two-appliance bundle.
The bundle consists of:
●Two (2) identically configured hardware appliances
●Two (2) identical software subscriptions
A 50% discount will be automatically applied to the second software subscription in the bundle. See the specific model section in this document for the appropriate bundle PID.
Renewing HA Bundle Software Subscriptions
The 50% pricing discount also applies to HA bundles at time of renewal.
Cisco Secure Client Licensing
Cisco Secure Client (formerly AnyConnect Plus, Apex, and VPN Only) licenses are required to use the Remote Access VPN (RA VPN) functions on all firewalls (physical and virtual) running the Firewall Threat Defense code base version 6.2.1 and later. This adds capability to the Firewall Threat Defense code base previously only available on appliances running the ASA code base.
For information on purchasing Cisco Secure Client licenses and sharing the licenses with your Smart Account, please see the Cisco Secure Client Ordering Guide.
Instructions can also be found in the Cisco Secure Client License FAQ.
Service and Support Offerings
Software Application Support Plus Upgrades (SASU)
Cisco Secure Firewall Threat Defense software, ASA with FirePOWER Services, ASA firewall, and Cisco Secure Firewall Management Center security licenses include software subscription support. SASU is essential to keeping your business-critical applications available, highly secure, and operating at optimal performance. For the term of your software subscription licenses, you will receive timely, uninterrupted access to the latest software updates and major upgrade releases, which may contain significant architectural changes and new features and functions. With software subscription support, you will have the latest software working to protect your business. You will also have access to a wide range of online tools and communities that can help you solve problems quickly, maintain business continuity, improve your competitiveness, and make the most of limited resources through increased productivity.
This support entitles customers to the services listed here for the full term of the purchased software subscription:
●Software updates and major upgrades, to keep applications performing optimally with the most current feature set
●Access to the Cisco Technical Assistance Center (TAC), which provides fast, specialized support
●Online tool building, to expand in-house expertise and boost business agility
●Collaborative learning, to provide additional knowledge and training opportunities
No additional products or fees are required to receive these services with a software subscription.
Cisco SASU includes:
●Registered access to Cisco.com
●24-hour access to the Cisco TAC and Cisco software specialists
●Maintenance and minor software release updates
●Major software upgrade releases