Monday, October 2, 2017

Adding TAMC Classic License in Cisco FMC

In order to add and apply URL Filtering and Malware licenses (L-ASA5525-TAMC=) on a newly added ASA FirePower module in FirePower Management Center (FMC), you'll need either a 1, 3, or 5-year Classic licenses.


You need to go to Cisco License Portal to register the electronic Product Authorization Key (e-PAK) and use FMC Key (MAC address of the appliance) which can be found under System > Licenses > Classic Licenses > Add New Licenses.




Open the license key in notepad (maximize it to have a better view). Copy/paste URL Filter and Malware product license text string between BEGIN SourceFire Product License : and - - - END SourceFire Product License
 



Click Verify License.
 

Click Submit License.


When you go back to the main License page you'll notice the URL Filtering (Used) count had incremented by 1 (from 4 to 5).



Copy/paste the half portion which is the Malware license click Verify License > Submit License.
 



Assign the URL and Malware license/feature to ASA devices under Devices > Device Management > click edit (pencil icon) which is on the far right column. Go to Device tab > License > Edit (pencil icon).

Only Protection and Control features are enabled by default when you add a device (ASA FirePower module). Malware and URL Filtering were initially grayed out before adding the new licenses.




Tick Malware and URL Filtering > Save.
 


It would also be prudent to request Cisco Licensing team for the free Protection and Control licenses  to have an equal amount of licenses with URL Filtering+Malware. I had an issue where I only applied the TAMC (URL Filtering+Malware) Classic License and the FirePower sensor was added successfully but I can't choose or tick all four licenses (Protection, Control, Malware and URL Filtering).