Cisco Security Licensing and Software Access 171028

Cisco Security Licensing and
Software Access Process
Global Security Sales Organization (GSSO)

Channel Engineering
November 1, 2017
Cisco Security Licensing and Software Access
Table of Contents
1 Introduction ................................................................................................................................ 5
2 Cisco Smart Licensing .............................................................................................................. 5
2.1 Creating a Cisco Smart Account ........................................................................................................ 5
2.2 Smart Licensing Account Activation Example ................................................................................... 8
2.2.1 Smart License Account Activation: FTD ..................................................................................... 8
2.2.2 Smart License Registration Example ....................................................................................... 10
3 Firepower Management Center (FMC) ............................................................................ 11

3.1 Software Download: FMC .............................................................................................................. 11
3.2 Software Request: FMC .................................................................................................................. 12
3.3 License Request: FMC ..................................................................................................................... 13
3.3.1 POV Smart License: FMC ......................................................................................................... 14
3.3.2 Lab Smart License: FMC .......................................................................................................... 15
3.3.3 POV Classic License: FMC ........................................................................................................ 16
3.3.4 Lab Classic License: FMC ......................................................................................................... 18
4 Firepower Threat Defense (FTD) ...................................................................................... 19

4.1 Software Download: FTD ................................................................................................................ 19
4.1.1 Software Request: FTD ............................................................................................................ 21
4.2 License Request: FTD ...................................................................................................................... 22
4.2.1 POV Smart License: FTD .......................................................................................................... 22
4.2.2 Lab License: Cisco Smart Licensing for FTD ............................................................................. 23
5 Firepower Services for ASA or Firepower ...................................................................... 24

5.1 Software Download: Firepower Services for ASA or Firepower ..................................................... 24
5.1.1 Software Request: Firepower Services for ASA or Firepower .................................................. 26
5.2 License Request: Firepower Services for ASA or Firepower ........................................................... 27
5.2.1 POV License: Firepower Services for ASA or Firepower ........................................................... 28
5.2.2 Lab License: Firepower Services for ASA or Firepower ............................................................ 30
6 Adaptive Security Appliance (ASA) ................................................................................... 31

6.1 Software Download: ASA5500-X and Firepower 2100/4100 / 9300 .............................................. 31
6.1.1 Software Request: ASA ............................................................................................................ 33
6.2 License Request: ASA ...................................................................................................................... 33
6.2.1 POV License: ASA on Firepower 2100/4100/9300 .................................................................. 34
6.2.2 Lab License: Firepower 2100/4100/9300 ................................................................................ 35
6.2.3 POV License: ASA..................................................................................................................... 36
2
6.2.4 Lab License: ASA ...................................................................................................................... 38
7 Adaptive Security Virtual Appliance (ASAv).................................................................. 40

7.1 Software Download: ASAv .............................................................................................................. 40
7.1.1 Software Request: ASAv .......................................................................................................... 41
7.2 License Request: ASAv .................................................................................................................... 42
7.2.1 POV License: ASAv ................................................................................................................... 42
7.2.2 Lab License: ASAv .................................................................................................................... 44
8 Cisco Security Manager (CSM) ............................................................................................ 45

8.1 Software Download: CSM ............................................................................................................... 45
8.1.1 Software Request: CSM ........................................................................................................... 46
8.2 License Request: CSM ..................................................................................................................... 46
8.2.1 Lab License: CSM ..................................................................................................................... 47
9 Identity Services Engine (ISE) ............................................................................................. 47

9.1 Software Download: ISE .................................................................................................................. 47
9.1.1 Software Request: ISE ............................................................................................................. 48
9.2 License Request: ISE ........................................................................................................................ 49
9.2.1 Lab License: ISE ....................................................................................................................... 49
10 Access Control System (ACS) ............................................................................................... 50

10.1 Software Download: ACS ................................................................................................................ 50
10.1.1 Software Request: ACS ............................................................................................................ 51
10.2 License Request: ACS ...................................................................................................................... 52
10.2.1 Lab License: ACS ...................................................................................................................... 52
11 Web Security Appliance (WSA) .......................................................................................... 53

11.1 Software Download: WSA ............................................................................................................... 53
11.1.1 Software Request: WSA .......................................................................................................... 54
11.2 License Request: WSA ..................................................................................................................... 55
11.2.1 POV License: WSA ................................................................................................................... 55
11.2.2 Lab License: WSA..................................................................................................................... 56
12 Email Security Appliance (ESA).......................................................................................... 57

12.1 Software Download: ESA ................................................................................................................ 57
12.1.1 Software Request: ESA ............................................................................................................ 58
12.2 License Request: ESA ...................................................................................................................... 58
12.2.1 POV License: ESA ..................................................................................................................... 59
12.2.2 Lab License: ESA ...................................................................................................................... 60
13 Security Management Appliance (SMA) .......................................................................... 61

13.1 Software Download: SMA ............................................................................................................... 61
13.1.1 Software Request: SMA........................................................................................................... 62
13.2 License Request: SMA ..................................................................................................................... 62
3
13.2.1 POV License: SMA.................................................................................................................... 63

13.2.2 Lab License: SMA ..................................................................................................................... 64
14 License Request: CWS ............................................................................................................ 65

14.1 POV License: CWS ........................................................................................................................... 65
15 Cloud Email Security (CES) .................................................................................................. 66

15.1 License Request: Cloud Email Security ........................................................................................... 66
15.2 POV or Lab License: Cloud Email Security ....................................................................................... 66
14 Advanced Malware Protection (AMP) for Endpoint ................................................... 69

14.1 License Request: AMP ..................................................................................................................... 69
14.1.1 POV License: AMP ................................................................................................................... 69
14.1.2 Lab License: AMP .................................................................................................................... 70
15 Cisco Threat Grid ..................................................................................................................... 71

15.1 License Request: Cisco Threat Grid ................................................................................................. 71
15.1.1 POV License: Cisco Threat Grid................................................................................................ 71
15.1.2 Lab License: Cisco Threat Grid ................................................................................................. 72
15.1.3 Meraki Integration: Cisco Threat Grid..................................................................................... 73
16 Stealthwatch ............................................................................................................................. 74
16.1 Software Access and License Request: Stealthwatch ..................................................................... 74
16.1.1 Software Access and POV License Request: Stealthwatch ...................................................... 74
16.1.2 POV License Renewal: Stealthwatch ....................................................................................... 74
16.1.3 Software Access and Lab License Request: Stealthwatch ....................................................... 75
16.1.4 Device Serial Numbers for License Entitlement: Stealthwatch ............................................... 76
16.2 Online / Offline License Activation: Stealthwatch .......................................................................... 76
16.2.1 Online License Activation: Stealthwatch ................................................................................. 77
16.2.2 Offline License Activation: Stealthwatch................................................................................. 78
17 Cisco Defense Orchestrator ................................................................................................. 79

17.1 License Request: Cisco Defense Orchestrator ................................................................................ 79
17.1.1 POV License: Cisco Defense Orchestrator ............................................................................... 79
17.1.2 Lab License: Cisco Defense Orchestrator................................................................................. 80
18 Next Steps................................................................................................................................... 82
19 Change Log ................................................................................................................................. 82
4
1 Introduction
The Cisco Global Security Sales Organization (GSSO) is proud to continue the Security Licensing and
Software Access Program. This document outlines the processes that partner SEs will follow to request
licenses for Partner Executed POVs and labs or to obtain required software.
The Security Licensing and Software Access program supports multiple security products and evolves
with the Cisco Security portfolio. View the appropriate sections below to complete the Licensing and
Software Access request for supported Security products. The process is administered through Partner
Help which provides support in over 20 languages. Please send any escalations to
securitypov@cisco.com.
2 Cisco Smart Licensing
Many Security features are now enabled via Cisco Smart Licensing which will be configured within the
Management interfaces of those Security products. Before requesting any Security feature licenses
which are enabled via Smart Licensing, you or your organization must either have an existing Cisco
Smart Account or create a new Cisco Smart Account to associate the Security feature licenses to.
2.1 Creating a Cisco Smart Account
To create a new Cisco Smart Account and the Virtual Accounts within for Lab and Demo licenses, go to
http://software.cisco.com and select Request a Smart Account in the Administration section.
5
Select the appropriate radio button to either create the Smart Account yourself or proxy the creation to
the appropriate person. If you are creating the account, verify the Account information is correct and
select Continue.
The request will go through a validation process and the account will be created once the information
has been validated. After the account has been created, it is recommended to also create separate
Virtual Accounts to hold the Lab and/or POV licenses. To create the Virtual Accounts, log into the Smart
Account at http://software.cisco.com and select Manage Smart Account in the Administration section.
6
Next select Virtual Accounts and then select New Virtual Account.
Enter a name and description for the Virtual Account which would associate the Virtual Account to the
appropriate need (i.e. FTD Lab Account and/or FTD POV Account) and select Save.
Repeat this process as needed to create any additional Lab and/or POV Virtual Accounts.
7
2.2 Smart Licensing Account Activation Example
Many security licenses are now managed via Cisco Smart Licensing. The instructions that follow serve as
an example of enabling the Smart Software Licensing in the Smart Account Portal and then registering it
in a Firepower Management Center to utilize the POV/Lab licenses provisioned by Partner Help. These
instructions serve as an example, but need to be adjusted for the particular product being used.
2.2.1 Smart License Account Activation: FTD
To enable the Smart Licenses, go to http://software.cisco.com and log in using the credentials for the
appropriate Smart Account. Then select Smart Software Licensing in the License Window.
8
Next, select Inventory. Make sure the appropriate Virtual Account is selected, and then select New
Token.
Next, enter an appropriate description for the token (e.g. Customer FTD POV), set the Expire After field
to 60 days, click export controls box, and select Create Token.
9
Then copy the new token to then enter it into the FMC. On the token just created, click Actions and
then select Copy. This token will be utilized within the FMC as shown in the next section.
2.2.2 Smart License Registration Example
To enable the Smart Licenses in a Firepower Management Center (FMC), navigate through the FMC GUI
to System > Licenses > Smart Licenses and select Register. These instructions serve as an example, but
need to be adjusted for the particular product being used.
Paste the token created in the previous section into the Product Instance Registration Token field and
select Apply Changes.
10
You should now see details in the Smart License Status section and the FMC will be registered.
3 Firepower Management Center (FMC)
3.1 Software Download: FMC
This section covers the process to download the software required for the FMC. The instructions that
follow demonstrate how to obtain required software for a virtual FMC. There are many possible
software requirements and the information below serves as an example of a common configuration for
a partner executed POV or a Lab. Adjust the process outlined below as required to match your hardware
specifications.
To download the Firepower software, go to http://software.cisco.com/download/navigator.html. This

will present the Downloads Home > Products pane. Continue to navigate to Downloads Home >
Products > Security > Firewalls > Firewall Management > Firepower Management Center Virtual
Appliance > FireSIGHT System Software. Depending upon the features required, expand the All Releases
drop-down in the left hand pane to select a link such as 6.1.0 or later which provides an option to
download the software below. Select the following options and download the versions listed below or
later.
11
Firepower Management Center Virtual64 VMWare

(Cisco_Firepower_Management_Center_VMware-6.1.0-330.tar.gz)
If you are unable to access the software due to entitlement, engage with your Cisco alliance manager to
associate your CCO account with your company to grant partner-level CCO access. If you are still unable
to access the software, open a case with partner help following the instructions in the following section.
3.2 Software Request: FMC
To complete a Software Request, open a case with Partner Help. You can go to www.cisco.com/go/ph
and under Engage Global Virtual Engineering (GVE), select open a case or call 1.800.553.6387 and
select Options 5-1-1. In the case, provide the following required information and enter desired software
in the Question field.
Architecture = Security
Technology = Network Security
Service Type = Cisco Product or Service Information
Sub Service Type = Licensing
Subject = Software Access
Question
o Product type is [FMC]
o FMC type is [Hardware or Virtual FMC Model]
o FMC Software [Version]
12
Upon receiving this case, partner help will use the special file publish tool to provide the requested
software. You will receive an email from Cisco to the address associated with your Cisco CCO ID. Partner
Help will be notified when you download the requested software.
Example Question
o FMC type is [Virtual]
o FMC Software [Cisco_Firepower_Management_Center_VMware-6.1.0-330.tar.gz]
3.3 License Request: FMC
As of v6.0 and later, the FMC uses smart licensing. In software version v5.4 and earlier, the FMC requires
a classic license. License duration is dependent on internal tools and currently all SMART Licenses are
limited to 60-days. Partner Help supports smart and classic license requests for POVs and Partner Labs.
If you are requesting a classic FMC license, you will need the FMC License Key. This can be found by
navigating through the FMC to System > Licenses > Classic Licenses.
On the screen which follows, you will be presented with the Add Feature License field where you can
copy the License Key and provide it in the case with the Partner Help agent.
13
3.3.1 POV Smart License: FMC
Starting in software version v6.0, the FMC requires a Smart License. The instructions for Smart Licensing
account creation and activation were provided in Section 2 of the guide. You must first complete that
section prior to requesting an FMC Smart License.
To complete a License Request, open a case with Partner Help. You can go to www.cisco.com/go/ph and
under Engage Global Virtual Engineering (GVE), select open a case or call 1.800.553.6387 and select
Options 5-1-1. In the case, provide the following required information and enter desired software in the
Question field.
Subject = FMC POV Smart License
Question
o Cisco Cybersecurity Partner Account Manager [Cisco CyPAM if applicable]
o Partner AM CCO ID [Partner AM CCO ID]
o Partner SE CCO ID [Partner SE CCO ID]
o Partner Fire Jumper CCO ID [Partner Fire Jumper CCO ID if applicable]
o POV License for [Customer name]
o Customer Point of Contact [Customer POC]
o Customer Opportunity Value [Opportunity in USD]
o FMC type [Hardware or Virtual Sensor Model & OS (VMWare or KVM)]
o Partner Smart Account Domain ID [Smart Account Domain ID]
o Partner Smart Account [Smart Account Name]
o Partner Smart Virtual Account [Smart Virtual Account Name]
o Expected Start Date is [POV Start Date]
CCW Deal ID = [Deal ID]
NOTE: A CCW Deal ID is mandatory for this service.
14
Example Question
o Cisco Cybersecurity Partner Account Manager [John Smith]
o Partner AM CCO ID [dmurphy]
o Partner SE CCO ID [bhorner]
o Partner Fire Jumper CCO ID [ghubbard]
o POV License for [ACME Inc]
o Customer Point of Contact [Wiley Coyote]
o Customer Opportunity Value [$100k USD]
o FMC type is [2 Device FMCv on VMWare]
o Partner Smart Account Domain ID [partner.com]
o Partner Smart Account [POV]
o Partner Smart Virtual Account [Default]
o Expected Start Date is [2 January 2017]
Upon receiving this case, Partner Help will request Smart License keys. You will receive a FMC license in
your Smart account that can be loaded using the instructions in section 2. One POV license extension
will be granted per customer. To receive the extension, open a new Partner Help case following the
process above.
3.3.2 Lab Smart License: FMC
Starting in software version v6.0, the FMC requires a Smart License. The instructions for Smart Licensing
account creation and activation were provided in Section 2 of the guide. You must first complete that
section prior to requesting an FMC Smart License.
Question field.
Subject = FMC Lab Smart License
Question
15

o Expected Start Date is [Lab Start Date]
Example Question
o FMC type is [2 Device FMCv on VMWare]
o Partner Smart Account [Lab]
Upon receiving this case, Partner Help will request Smart License keys. You will receive a FMC license in
process above.
3.3.3 POV Classic License: FMC
Question field.
Subject = FMC POV License
Question
o FMC License Key [FMC Key found in Section 3.3]
16
Example Question
o FMC type [2 Device FMCv on VMWare]
o FMC License Key [66:00:50:56:11:11:11]
Upon receiving this case, Partner Help will generate POV license keys. You will receive a FMC license and
this license can be loaded using the instructions provided by Partner Help.
One POV license extension will be granted per customer. To receive the extension, open a new Partner
Help case following the process above.
17
3.3.4 Lab Classic License: FMC
Question field.
Subject = FMC Lab License
Question
o FMC type [Hardware or Virtual Sensor Model]
o FMC License Key [FMC Key found in Section 3.3]
Example Question
o FMC type [2 Device FMCv on VMWare]
o FMC License Key [66:00:50:56:11:11:11]
Upon receiving this case, Partner Help will generate POV license keys. You will receive a FMC license and
this license can be loaded using the instructions provided by Partner Help.
18
Unlimited Lab license extensions will be granted to the Partner. To receive the extension, open a new
Partner Help case following the process above.
4 Firepower Threat Defense (FTD)
Starting in software version v6.0, the FTD features are managed via Cisco Smart Licensing which must be
enabled within the FMC. You must first enable the Smart Software Licensing in the Smart Account
Portal and then register the FMC to the Smart Account to utilize the POV/Lab licenses for FTD which will
be provisioned by Partner Help. The instructions for Smart Licensing account activities were provided in
Section 2 of the guide.
4.1 Software Download: FTD
This section covers the process to download the software required for Firepower Threat Defense on the
ASA 5515-X chassis. There are many possible software requirements and the information below serves
as an example of a common configuration for a partner executed POV or a Lab. Adjust the process
outlined below as required to match your hardware specifications. To download the FTD system
software, go to http://software.cisco.com/download/navigator.html. This will present the Downloads
Home > Products pane. Continue to navigate to Downloads Home > Products > Security > Firewalls >
Next-Generation Firewalls (NGFW) > ASA 5500-X with Firepower Services > ASA 5515-X with Firepower
Services > Firepower Threat Defense Software.
19
Select the following options and download the versions listed below or later.
Firepower Threat Defense for ASA 55XX series v6.1.0
(ftd-6.1.0-330.pkg)
Firepower Threat Defense v6.1.0 boot image for ASA 5512/5515/5525/5545/5555 devices
(ftd-boot-9.6.2.0.cdisk)
NOTE: The ASA5585-X platforms do not support FTD software.
20
4.1.1 Software Request: FTD
Question
o Product type [FTD]
o Sensor type [Hardware or Virtual Sensor Model]
o FTD Boot Image [Version]
o FTD Install Package [Version]
Example Question
o Sensor Type [ASA5515-X]
o FTD Boot Image [v6.1.0]
o FTD Install Package [v6.1.0]
21
4.2 License Request: FTD
Partner Help supports license requests for both POVs and Partner Labs. License duration is dependent
on internal tools and currently all SMART Licenses are limited to 60-days.
4.2.1 POV Smart License: FTD
Starting in software version v6.0, the FTD requires a Smart License. The instructions for Smart Licensing
Account creation and activation were provided in Section 2 of the guide. You must first complete that
section prior to requesting an FTD Smart License.
Question field.
Subject = FTD POV Smart License
Question
22
Example Question
o Product Type [FTD]
o Sensor type [Cisco Firepower Threat Defense Virtual Appliance]
o Partner Smart Account [POV]
Upon receiving this case, Partner Help will request Smart License keys. You will receive an FTD license in
process above.
4.2.2 Lab License: Cisco Smart Licensing for FTD
To request a Partner Lab License, open a case with Partner Help. You can go to www.cisco.com/go/ph
select Options 5-1-1. In the case, provide the following required information.
Subject = FTD Lab License
Question
o Product type is [FTD]
o Sensor type is [Hardware or Virtual Sensor Model]
o Partner Smart Account Name [Smart Account Name]
o Partner Smart Virtual Account Name [Smart Virtual Account Name]
23
Example Question
o Sensor type [Cisco Firepower Threat Defense Virtual Appliance]
o Partner Smart Account [Lab]
Upon receiving this case, Partner Help will generate Lab license keys. You will receive confirmation that
the FMC and FTD licenses were loaded into your Smart Account and the licenses can be loaded using the
instructions provided in Section 2 of the Guide.
5 Firepower Services for ASA or Firepower
5.1 Software Download: Firepower Services for ASA or Firepower
This section covers the process to download the software required for Firepower Services for ASA or
Firepower. The instructions that follow demonstrate how to obtain required software for Firepower
Services for ASA on the 5515-X, Firepower on the 7110, and a virtual Firepower MC. There are many
possible software requirements and the information below serves as an example of a common
configuration for a partner executed POV. Adjust the process outlined below as required to match your
hardware specifications.
To download the Firepower Services for ASA software, go to

http://software.cisco.com/download/navigator.html. This will present the Downloads Home > Products
pane. Continue to navigate to Downloads Home > Products > Security > Firewalls > Next-Generation
Firewalls (NGFW) > ASA 5500-X with FirePOWER Services > ASA 5515-X with Firepower Services >
Firepower Services Software for the ASA. Depending upon the features required, expand the All
Releases drop-down in the left hand pane to select a link such as 6.0.0 or 5.4.0 which provides an option
to download the software below.
24
Select each of the following options and download the versions listed below or later.
Cisco ASA with Firepower Services ASA 5512-X through 5555-X Boot Image (asasfr-5500x-boot-
5.4.0-763.img)
Cisco ASA with Firepower Services Install Package (asafr-sys-5.4.0-763.pkg)
To download the Firepower software, go to http://software.cisco.com/download/navigator.html. This

Products > Security > Next Generation Intrusion Prevention System (NGIPS) > Firepower 7000 Series
Appliances > Firepower Appliance 7110 > Firesight System Software. As required, expand the All
Releases drop-down in the left hand pane to select a link such as 6.0.0.0 or 5.4.0 which provides an
option to download the software below. Select the following option and download the versions listed
below or later.
Sourcefire 3D S3 Sensor Device Restore ISO 5.4
(Sourcefire_3D_Device_S3-5.4.0-763-Restore.iso)
Next, select the Security breadcrumb. Continue navigating to Downloads Home > Products > Security >
Firewalls > Firewall Management > Firepower Management Center Virtual Appliance > FireSIGHT System
Software. Depending upon the features required, expand the All Releases drop-down in the left hand
pane to select a link such as 6.0.0.0 or 5.4.0 which provides an option to download the software below.
25
Select the following options and download the versions listed below or later.
FireSIGHT Virtual Defense Center for VMWare Package Installer
(Sourcefire_Defense_Center_Virtual64_VMware-5.4.0-763.tar.gz)
5.1.1 Software Request: Firepower Services for ASA or Firepower
Question
o Product type [Firepower for ASA -OR- Firepower]
o ASA with FP Boot Image [Version]
o ASA with FP Install Package [Version]
26
Example Question
o Product type [Firepower for ASA]
o Sensor type [ASA5515-X]
o ASA with FP Boot Image [v5.4.0]
o ASA with FP Install Package [v5.4.0]
5.2 License Request: Firepower Services for ASA or Firepower
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs.
If you are using software version v5.4 of the FMC, you will need the Firepower Management Center
License Key prior to initiating the License Request. The process for this is provided earlier in the guide.
If using the On-Box Firepower Manager in ASDM, you will navigate to Configuration > ASA Firepower
Configuration > Licenses. Select Add New License, copy the License Key, and open a request using the
same process as the FMC which is provided earlier in the guide.
27
If you do not see the ASA Firepower Configuration option, review the ASA 5506-X Quick Start Guide.
5.2.1 POV License: Firepower Services for ASA or Firepower
To request a POV license, open a case with Partner Help. You can go to www.cisco.com/go/ph and
Options 5-1-1. In the case, provide the following required information.
Subject = Firepower POV License
Question
28

o Customer Opportunity [Opportunity in USD]
Example Question
o Customer Opportunity [$100k USD]
Upon receiving this case, Partner Help will generate POV license keys. You will receive Control, AMP, and
URL license keys. All keys are required for full functionality of the appliance with a separate Firepower
MC and can be loaded using the instructions provided by partner help.
29
One POV license extension will be granted per customer. To receive the extension, open a new partner
help case following the process above.
5.2.2 Lab License: Firepower Services for ASA or Firepower
Subject = Firepower Lab License
Question
Example Question
Upon receiving this case, partner help will generate Lab license keys. You will receive Control, AMP, and
URL license keys.
30
License extension will be granted when required. To receive the extension, open a new partner help
case following the process above.
6 Adaptive Security Appliance (ASA)
6.1 Software Download: ASA5500-X and Firepower 2100/4100 / 9300
This section covers the process to download the software required for the Adaptive Security Appliance
on the ASA5500-X chassis or the Next-Generation Firepower 2100/4100/9300 chassis. The instructions
that follow demonstrate how to obtain required software for an ASA 5515-X and FP4100. There are
many possible software requirements and the information below serves as an example of a common
configuration for a partner executed POV. Adjust the process outlined below as required to match your
hardware specifications.
For best performance, Firepower Services for ASA requires system software 9.2(2) or later. For
additional information on migration paths and upgrade dependencies, please refer to the following link:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/upgrade/upgrade92.html.
To download the ASA system software, go to http://software.cisco.com/download/navigator.html. This

Products > Security > Firewalls > Adaptive Security Appliances (ASA) > ASA 5500-X Series Next-
Generation Firewalls > ASA 5515-X Adaptive Security Appliance > Software on Chassis.
Select each of the following options and download the versions listed below or later.
Adaptive Security Appliance (ASA) Device Manager: 7.3.3 (asdm-733.bin)
Adaptive Security Appliance (ASA) Software: 9.2.3.SMP (asa923-smp-k8.bin)
31
As an example to download the Firepower 4110 system software, go to

http://software.cisco.com/download/navigator.html. This will present the Downloads Home > Products
pane. Continue to navigate to Downloads Home > Products > Security > Firewalls > Next-Generation
Firewalls (NGFW) > Firepower 4100 Series > Firepower 4110 Security Appliance > Adaptive Security
Appliance (ASA) Software.
Expand the Latest and then the 9.6 options on the left pane and then select the following option and
publish the version listed below or later.
Cisco Adaptive Security Virtual Appliance CSP package for the Cisco Firepower Series (cisco-
asa.9.6.2.SPA.csp)
32
6.1.1 Software Request: ASA
Question
o Product type is [ASA]
o Appliance type is [Hardware Model]
o ASA Device Manager [Version]
o ASA Software [Version]
Example Question
o Product type [ASA]
o Appliance Type [ASA5515-X]
o ASA Device Manager [7.3.3]
o ASA Software [9.2.3]
6.2 License Request: ASA
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs on the
ASA5500-X chassis using Classic licenses. For the Firepower 4100/9300 chassis, ASA features are
enabled via Smart Licensing with a 60-day key.
Partners will need the show version from the ASA5500-X chassis prior to initiating the License Request.
On the ASA you will be using for the customer opportunity, you can issue the show version command
in the CLI or login to ASDM and select Tools > Command Line Interface. In the Command drop-down,
select show version and click Send.
33
Copy all the text in the Response section and paste it into a local text editor.
6.2.1 POV License: ASA on Firepower 2100/4100/9300
To request a POV Smart license for ASA on the Firepower 2100/4100/9300 Appliances, open a case with
Partner Help. You can go to www.cisco.com/go/ph and under Engage Global Virtual Engineering
(GVE), select open a case or call 1.800.553.6387 and select Options 5-1-1. In the case, provide the
following required information.
Subject = ASA on Firepower Appliance POV License
Question
o Product type [ASA on Firepower Appliance]
o Partner Smart Account Domain ID [Partner Smart Account Domain ID]
o Partner Smart Account Name [Partner Smart Account Name]
o Partner Smart Virtual Account Name [Partner Smart Virtual Account Name]
34

o Sensor type is [Hardware Model]
Example Question
o Partner Smart Account Name [POV]
o Partner Smart Virtual Account Name [Default]
o Sensor type is [FP4140]
Upon receiving this case, Partner Help will generate POV license keys. You will receive confirmation that
the ASA on Firepower Appliances licenses were loaded into your Smart Account and the licenses can be
loaded using the instructions provided in Section 2 of the Guide.
6.2.2 Lab License: Firepower 2100/4100/9300
Subject = ASA on Firepower Appliance Lab License
Question
o Product type is [ASA on Firepower Appliance]
o Partner Smart Account Domain ID [Partner Smart Account Domain ID]
35
o Partner Smart Account Name [Partner Smart Account Name]

o Partner Smart Virtual Account Name [Partner Smart Virtual Account Name]
o Sensor type is [Hardware Model]
Example Question
o Partner Smart Account Name [Lab]
o Sensor type is [FP4140]
Upon receiving this case, Partner Help will generate Lab license keys. You will receive confirmation that
the ASA on Firepower Appliances licenses were loaded into your Smart Account and the licenses can be
loaded using the instructions provided in Section 2 of the Guide.
6.2.3 POV License: ASA
Subject = POV License
Question
o Appliance type [Hardware Model]
o Customer Point of Contact is [Customer POC]
o Customer Opportunity is [Opportunity in USD]
o ASA Serial Number [Serial Number]
o Platform License [Base or Security Plus]
36
o VPN Features [Strong Encryption, Advanced Endpoint Assessment, AnyConnect Mobile,

AnyConnect Essentials, AnyConnect VPN Phone, Clustering]
o Firewall Features [Botnet Traffic Filter]
o AnyConnect Premium Licenses [Quantity]
o Security Contexts [Quantity]
o Show Version [Paste output from Show Version command]
Example Question
o Appliance type [ASA5515-X]
o Customer Point of Contact is [Wiley Coyote]
o Customer Opportunity is [$100k USD]
o ASA Serial Number [FTX999999QQ]
o Platform License [Base]
o VPN Features [Strong Encryption, AnyConnect Mobile, AnyConnect Essentials]
o Firewall Features [None]
o AnyConnect Premium Licenses [25]
o Security Contexts [0]
Upon receiving this case, Partner Help will generate POV license keys. You will receive the appropriate
ASA license activation key that can be loaded into ASDM by browsing to Configuration > Device
Management > Licensing > Activation Key.
37
Load the Activation Key in to the New Activation Key field, select Update Activation Key, save your
configuration, and reload the ASA.
6.2.4 Lab License: ASA
To request a Lab License, open a case with Partner Help. You can go to www.cisco.com/go/ph and under
Engage Global Virtual Engineering (GVE), select open a case or call 1.800.553.6387 and select Options
5-1-1. In the case, provide the following required information.
Subject = Lab License
Question
o Appliance type [Hardware Model]
o ASA [Serial Number]
38
o Platform License [Base or Security Plus]

o VPN Features [Strong Encryption, Advanced Endpoint Assessment, AnyConnect Mobile,
AnyConnect Essentials, AnyConnect VPN Phone, Clustering]
o Firewall Features [Botnet Traffic Filter]
o AnyConnect Premium Licenses [Quantity]
o Security Contexts [Quantity]
Example Question
o Appliance type [ASA5515-X]
o ASA Serial Number [FTX999999QQ]
o Platform License [Base]
o VPN Features [Strong Encryption, AnyConnect Mobile, AnyConnect Essentials]
o Firewall Features [None]
o AnyConnect Premium Licenses [25]
o Security Contexts [0]
Upon receiving this case, Partner Help will generate Lab License keys. You will receive the appropriate
ASA license activation key that can be loaded into ASDM by browsing to Configuration > Device
Management > Licensing > Activation Key.
39
Load the Activation Key in to the New Activation Key field, select Update Activation Key, save your
configuration, and reload the ASA.
7 Adaptive Security Virtual Appliance (ASAv)
7.1 Software Download: ASAv
This section covers the process to download the software required for the Adaptive Security Virtual
Appliance (ASAv). For best performance, the ASAv requires system software 9.5(1) or later. For
additional information on migration paths and upgrade dependencies, please refer to the following link:
http://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/products-
release-notes-list.html.
To download the ASA system software, go to http://software.cisco.com/download/navigator.html. This

40
Products > Security > Firewalls > Adaptive Security Appliances (ASA) > Adaptive Security Virtual
Appliance (ASAv) > Adaptive Security Appliance (ASA) Software.
Select the following option and download the versions listed below or later.
Cisco Adaptive Security Appliance (ASA) Device Manager: 7.5.1 (asdm-751.bin)
Cisco Adaptive Security Virtual Appliance OVA Package for the Cisco ASAv Virtual Firewall:
(asav951.ova)
7.1.1 Software Request: ASAv
Question
41
o Product type is [ASAv]

o ASA Device Manager [Version]
o ASAv Software [Version]
Example Question
o Product type is [ASAv]
o ASA Device Manager [v9.5.1]
o ASAv Software [asav951.ova]
7.2 License Request: ASAv
Partner Help supports license requests for both POVs and Partner Labs. The ASAv ships with a license by
default that is limited to 100kbps to connectivity testing and lab environments. Follow the process
below if you require a license for regular operation.
7.2.1 POV License: ASAv
Options 5-1-1. In the case, provide the following required information. Note that a SMART Account is
required for ASAv licenses. The instructions for Smart Licensing account activities were provided in
Section 2 of the guide.
Question
o Product type [ASAv]
42

o Partner Smart Account Domain ID [domain.com]
o Partner Smart Account Name [account name]
o Partner Smart Virtual Account Name [virtual account name]
o ASAv Model [ASAv5, ASAv10, or ASAv30]
o ASAv Serial Number [Serial Number]
o Quantity [#]
Example Question
o Partner Smart Account Name [POV]
o ASAv Model [ASAv10]
o ASAv Serial Number [FTX999999QQ]
o Quantity [1]
Upon receiving this case, Partner Help will request Smart License keys. You will receive an ASAv license
in your Smart account that can be loaded using instructions similar to section 2. One POV license
extension will be granted per customer. To receive the extension, open a new Partner Help case
following the process above.
43
7.2.2 Lab License: ASAv
5-1-1. In the case, provide the following required information. Note that a SMART Account is required
for ASAv licenses. The instructions for Smart Licensing account activities were provided in Section 2 of
the guide.
Question
o Partner Smart Account Domain ID [domain.com]
o Partner Smart Account Name [account name]
o Partner Smart Virtual Account Name [virtual account name]
o ASAv Model [ASAv5, ASAv10, or ASAv30]
o ASAv [Serial Number]
o Quantity [#]
Example Question
o Partner Smart Account Name [Lab]
o ASAv Model [ASAv10]
o ASAv Serial Number [FTX999999QQ]
o Quantity [1]
Upon receiving this case, Partner Help will request Smart License keys. You will receive an ASAv license
in your Smart account that can be loaded using instructions similar to section 2. One POV license
extension will be granted per customer. To receive the extension, open a new Partner Help case
following the process above.
44
8 Cisco Security Manager (CSM)
8.1 Software Download: CSM
This section covers the process to download the software required for a Cisco Security Manager
installation. There are many possible software requirements and the information below serves as an
example of a common configuration for a partner executed POV. Adjust the process outlined below as
required to match your hardware specifications.
To download the CSM software, go to http://software.cisco.com/download/navigator.html. This will

present the Downloads Home > Products pane. Continue to navigate to Downloads Home > Products >
Security > Security Management > Security Manager.
Scroll down to the following options and download the versions listed below or later. You should
download any patches for the best performance.
Cisco Security Manager 4.9 (fcs-scm-490-win-k9.zip)
45
8.1.1 Software Request: CSM
in the Question field. In the additional ISE software section, enter the file names for any additional
software required.
Question
o Product type [CSM]
o CSM Software [Version]
o Additional CSM Software [Version]
Example Question
o CSM Software [v4.9]
o Additional CSM Software [N/A]
8.2 License Request: CSM
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs. CSM ships
with a standard 90-day 50 device evaluation enterprise license which is ideal for POVs. Follow the
process below if you require a longer term license for a lab.
46
8.2.1 Lab License: CSM
Technology = Network
Question
Example Question
Upon receiving this case, Partner Help will generate Lab License keys. You will receive CSM license keys
that can be loaded into CSM by browsing to Tools > Security Manager Administration > Licensing. Select
the CSM tab and click Install a License. License extension will be granted when required. To receive the
extension, open a new partner help case following the process above.
9 Identity Services Engine (ISE)
9.1 Software Download: ISE
This section covers the process to download the software required for a virtual Identity Services Engine
To download the ISE software, go to http://software.cisco.com/download/navigator.html. This will

Security > Access Control and Policy > Identity Services Engine > Identity Services Engine Software.
47
Scroll down to the following options and download the versions listed below or later. You should
download any patches for the best performance.
Cisco ISE Software version 1.3.0 full installation (no IPN functionality) (ise-1.3.0.876.x86_64.iso)
Cisco Identity Services Engine Software Patch Version 1.3.0.876-Auto1-125229
(ise-patchbundle-1.3.0.876-Auto1-125229.x86_64.tar.gz)
9.1.1 Software Request: ISE
software required.
Technology = Identity
Question
o Product type [ISE]
o ISE Software [Version]
o ISE Patch [Version]
o Additional ISE Software [Version]
Example Question
o ISE Software [ise-1.3.0.876.x86_64.iso]
o ISE Patch [ise-patchbundle-1.3.0.876-Auto1-125229.x86_64.tar.gz]
o Additional ISE Software [N/A]
48
9.2 License Request: ISE
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs. ISE ships
with a standard 90-day 100 device evaluation license which is ideal for POVs. Follow the process below if
you require a longer term license for a lab.
Partners will need the show udi from the ISE prior to initiating the License Request. On the ISE
appliance you will be using for the customer opportunity, issue the show udi command in the CLI or
login to the ISE interface and select Help > About in the lower left corner. Copy the Product Identifier
(PID or SPID), Version Identifier (VID or VPID) and Serial Number (SN) and paste it into a local text editor.
9.2.1 Lab License: ISE
Question
o Primary Product ID [SPID]
o Primary Version ID [VPID]
o Primary Serial Number [SN]
49
Example Question
o Primary Product ID [ISE-VM-K9]
o Primary Version ID [V01]
o Primary Serial Number [ABCDEFGHIJK]
Upon receiving this case, Partner Help will generate Lab License keys. You will receive ISE license keys
that can be loaded into ISE by browsing to Administration > System > Licensing. If your license is already
expired, you will immediately be prompted to import a new License File. Browse to the License Keys
provided and click Import for each.
10 Access Control System (ACS)
10.1 Software Download: ACS
This section covers the process to download the software required for a virtual Access Control System
To download the ACS software, go to http://software.cisco.com/download/navigator.html. This will

Security > Access Control and Policy > Secure Access Control System.
50
Scroll down to the following options and publish the versions listed below or later. You should publish
any patches and may also publish a specific release or file requested by a partner.
ACS 5.7 FCS Official Version (ACS_v5.7.0.15.iso)
10.1.1 Software Request: ACS
software required.
Question
o Product type [ACS]
o ACS Software [Version]
o ACS Patch [Version]
o Additional ACS Software [Version]
51
Example Question
o ACS Software [5.7.0.15]
o ACS Patch [N/A]
o Additional ACS Software [N/A]
10.2 License Request: ACS
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs. ACS has a
standard 90-day evaluation license which is ideal for POVs. Follow the process below if you require a
longer term license for a lab.
10.2.1 Lab License: ACS
Question
o Product type is [ACS]
Example Question
Upon receiving this case, Partner Help will generate Lab License keys. You will receive an ACS license key
that can be loaded into ACS after login. If your license is already expired, you will immediately be
prompted to import a new License File.
52
Browse to the License Key provided and click Install.
If you would like to replace an existing ACS license, browse to System Administration > Configuration >
Licensing > Base Server License. Select a license and click Upgrade.
11 Web Security Appliance (WSA)
11.1 Software Download: WSA
This section covers the process to download for the software required for WSA. The instructions that
follow demonstrate how to provide required software for a virtual WSA S000V installation on VMware
ESXi. There are many possible software requirements and the information below serves as an example
of a common configuration for a partner executed POV. Adjust the process outlined below as required
to match your hardware specifications. For best performance, partners should run WSA 8.5 or later.
Note that this software download process only supports virtual appliances because software is
automatically downloaded to physical appliance.
To download the software, go to http://software.cisco.com/download/navigator.html. This will present

the Downloads Home > Products pane. Continue to navigate to Downloads Home > Products > Security
> Web Security > Web Security Virtual Appliance
53
Scroll down to the following options and download the version listed below or later.
Cisco Web Security Virtual Appliance S000V (coeus-8-5-0-497.ova)
11.1.1 Software Request: WSA
Technology = Content Security
Question
o Product type [WSA]
o Appliance type [VM Model]
o WSA Version [Version]
Example Question
o Appliance Type [S000V]
o WSA Version [coeus_8_7_0_172_S000V.zip]
54
11.2 License Request: WSA
on internal tools, but the goal is to provide 45-day keys for POVs and 180-day keys for labs. As of the
recent update of this document, partner help is able to provide lab and POV licenses for both virtual and
physical appliances.
Partners will need the Serial Number from the WSA prior to initiating the License Request. The serial
number can be found by looking at the sticker on the back of the appliance, issuing the version
command in the CLI or navigating to Monitor/Reporting > System Status in the GUI. This is required for
all physical appliances and virtual appliances with existing licenses.
11.2.1 POV License: WSA
Question
o Appliance type is [Hardware Model or VM Model
o Serial Number [Serial Number]
55
Example Question
o Customer Opportunity [$100k]
o Appliance Type [S170]
o Serial Number [0022195D9132-GKVRBJ4]
Upon receiving this case, Partner Help will generate POV license keys. You will receive WSA license keys
that should be saved and unzipped on your local machine and can be loaded using the instructions
provided by partner help.
11.2.2 Lab License: WSA
Question
Example Question
o Appliance Type [S170]
56
Upon receiving this case, Partner Help will generate Lab License keys. You will receive WSA license keys
12 Email Security Appliance (ESA)
12.1 Software Download: ESA
This section covers the process to download software required for ESA. The instructions that follow
demonstrate how to provide required software for a virtual ESA C000V installation on VMware ESXi.
There are many possible software requirements and the information below serves as an example of a
common configuration for a partner executed POV. Adjust the process outlined below as required to
match your hardware specifications. For best performance, partners should run ESA 9.0 or later. Note
that this software download process only supports virtual appliances because software is automatically
downloaded to physical appliance.

> Email Security > Email Security Virtual Appliance
Scroll down to the following options and publish the versions listed below or later. If requested by the
partner in the case, you can provide a specific release or model.
Cisco Email Security Virtual Appliance C000V (phoebe-9-0-0-500-C000V.zip)
57
12.1.1 Software Request: ESA
Question
o Product type [ESA]
o Appliance type [VM Model]
o ESA Software [Version]
Example Question
o Appliance Type [C000V]
o ESA Software [phoebe_9_0_500_C000V.zip
12.2 License Request: ESA
Partners will need the Serial Number from the ESA prior to initiating the License Request. The serial
58
12.2.1 POV License: ESA
Question
o Product type is [ESA]
o Serial Number [SN]
Example Question
59
Upon receiving this case, Partner Help will generate POV license keys. You will receive ESA license keys
12.2.2 Lab License: ESA
Question
o Appliance type [Hardware Model or VM Model
o Serial Number [SN]
Example Question
Upon receiving this case, Partner Help will generate Lab License keys. You will receive ESA license keys
60
13 Security Management Appliance (SMA)
13.1 Software Download: SMA
This section covers the process to download the software required for SMA. The instructions that follow
demonstrate how to provide required software for a virtual SMA M000V installation on VMware ESXi.
There are many possible software requirements and the information below serves as an example of a
common configuration for a partner executed POV. Adjust the process outlined below as required to
match your hardware specifications. For best performance, partners should run SMA 9.0 or later.

> Security Management > Content Security Management Virtual Appliance
Scroll down to the following options and publish the versions listed below or later. If requested by the
partner in the case, you can provide a specific release or model.
Cisco Content Security Management Virtual Appliance M000V (zeus-9-0-0-087-M000V.zip)
61
13.1.1 Software Request: SMA
Question
o Product type [SMA]
o Appliance type [Hardware Model or VM Model]
o SMA Software [Version]
Example Question
o Appliance Type [M000V]
o SMA Software [zeus_9_0_0_087_M000V.zip]
13.2 License Request: SMA
Partners will need the Serial Number from the WSA prior to initiating the License Request. The serial
62
13.2.1 POV License: SMA
Question
Example Question
Upon receiving this case, Partner Help will generate POV license keys. You will receive SMA license keys
63
13.2.2 Lab License: SMA
Question
o Appliance type [Hardware Model or VM Model
Example Question
Upon receiving this case, Partner Help will generate Lab License keys. You will receive SMA license keys
64
14 License Request: CWS
Partner Help supports CWS license requests for POVs only. License duration is 45-days with the ability to
request one extension.
14.1 POV License: CWS
Question
o Product type is [CWS]
o Customer Opportunity is [Opportunity in USD, endpoints, purchase date]
o Win Criteria is [Justification]
o Cisco Contact is [First Name, Last name, Title (Role), Phone, Email, Country]
o Customer Information is [Company Name, Street Address, State, Zip, Country]
o Primary Customer Point of Contact is [First Name, Last Name, Title (Role), Phone, Email,
Time Zone]
o Total number of potential users across end-customer organization [Quantity]
o Estimated Customer Purchase Date [Next 3 months, Next 3-6 months, More than 6
months, Not Defined Yet]
o Connector type is [ISR, ASA, WSA, WSAv, No Device, Other]
o Geographic breakout points are [N/A or specific countries/regions]
o Site Information [State, Country, Number of Users] (List all sites)
65
Example Question
o Product type [CWS]
o Customer Opportunity is [$10k USD, 100 endpoints, 1 January 2017 purchase date]
o Cisco Contact is [Ralph Emerson, SE, (999) 555-1212, remerson@cisco.com,USA]
o Customer Information is [ACME Inc, 10 Any Street, Notown, NY 12345, USA]
o Primary Customer Point of Contact is [Wiley Coyote, SE (888) 444-2121,
wcoyote@acme.com, UTC -5]
o Total number of potential users across end-customer organization [100]
o Estimated Customer Purchase Date [Not Defined Yet]
o Connector type is [ASA]
o Geographic breakout points are [N/A]
o Site Information [NY, USA, 100]
Upon receiving this case, Partner Help will generate POV license keys. You will receive CWS license keys
that can be loaded using the instructions provided by partner help.
15 Cloud Email Security (CES)
15.1 License Request: Cloud Email Security
Partner Help supports 45-day license requests for both POVs or Partner Labs with the ability to request
one 45-day extension.
15.2 POV or Lab License: Cloud Email Security
To request a POV or Lab License, open a case with Partner Help. You can go to www.cisco.com/go/ph
66

Question
o Product type [CES]
o POV License for [Customer Name]
o Customer Contact Information
Customer Contact Name: [First Name, Last Name]
Customer Contact Email Address: [Email Address]
Customer Contact Telephone Number: [Telephone Number]
o Cisco Contact Information
Cisco Account Manager Name [First Name, Last Name]
Cisco Account Manager Email Address: [Email Address]
Cisco Systems Engineer Name [First Name, Last Name]
Cisco Systems Engineer Email Address: [Email Address]
o Partner Contact Information
Partner Systems Engineer Name [First Name, Last Name]
Partner Systems Engineer Email Address: [Email Address]
o Customer Address Information [Actual Location]
Street Address: [Address]
City: [City]
State/Province: [State/Province]
Country: [Country]
Postal Code: [Postal Code]
o Cloud Email Security EXACT Seat Count: [Quantity]
o POV Start Date: [MM/DD/YYYY]
o Cloud Email Security Data Center Region: [CHOOSE ONE FROM OPTIONS BELOW]
United States
Europe
Canada
o Office 365 Support Required: [CHOOSE ONE FROM OPTIONS BELOW]
No
Yes
o Intelligent Multi-scan Support Required: [CHOOSE ONE FROM OPTIONS BELOW]
No
Yes
67
Example Question
o Product type [CES]
o Customer Opportunity [$50k USD]
o Customer Contact Information
o Customer Contact Name: [Wiley Coyote]
o Customer Contact Email Address: [wcoyote@acme.com]
o Customer Contact Telephone Number: [(444) 555-2121]
o Cisco Contact Information
o Cisco Account Manager Name [Ralph Emerson]
o Cisco Account Manager Email Address: [remerson@cisco.com]
o Cisco Systems Engineer Name [Waldo Jenkins]
o Cisco Systems Engineer Email Address: [wjenkins@cisco.com]
o Partner Contact Information
o Partner Systems Engineer Name [James Doe]
o Partner Systems Engineer Email Address: [jdoe@partner.com]
o End Customer Address [Actual Location]
o Street Address: [10 Any Street]
o City: [Notown]
o State/Province: [NY]
o Country: [USA]
o Postal Code: [12345]
o Cloud Email Security bundle EXACT Seat Count: [500]
o POV Start Date: [01/02/2017]
o Cloud Email Security Data Center Selection (Region): [United States]
o Office 365 Support Required: [Yes]
o Intelligent Multi-scan Support Required: [No]
o Deal ID: [123456789]
Upon receiving this case, Partner Help will request the CES POV License activation. Provisioning and
configuration of the CES service may take some time so please be patient. Once the license has been
68
created, the CES Activation Team will contact the key personnel to continue the provisioning and
configuration steps.
14 Advanced Malware Protection (AMP) for Endpoint
14.1 License Request: AMP
on internal tools, but the goal is to provide 90-day keys for POVs with one extension and 180-day keys
for labs with unlimited extensions. There is no software access or required product information for the
AMP license request.
Please note, there should only be (1) parent AMP for Endpoint Console account created for each Partner
Organization and all SEs at the Partner Organization should request licenses as a user under that parent
account. Personal accounts for Partner SEs are not supported.
14.1.1 POV License: AMP
To request a POV License, open a case with Partner Help. You can go to www.cisco.com/go/ph and
Question
o Product type [AMP for Endpoint]
o Customer Point of Contact Email [Customer POC Email Address]
69
Example Question
o Customer Point of Contact Email [wcoyote@acme.com]
Upon receiving this case, Partner Help will generate POV licenses. You will receive an email from partner
help with credentials and instructions on how to access your account. Partners can request a single 30-
day license extension if required, but this request must be processed before the original 90-day license
expires. To receive the extension, open a new partner help case following the process above requesting
an extension.
14.1.2 Lab License: AMP
Question
Example Question
Upon receiving this case, Partner Help will generate lab licenses. You will receive an email from partner
help with credentials and instructions on how to access your account.
70
15 Cisco Threat Grid
15.1 License Request: Cisco Threat Grid
on internal tools, but the goal is to provide a 45-day API license key for POVs with one extension and a 6-
month API license key for Partner Labs with unlimited extensions. There is no software access or
required product information for the Cisco Threat Grid license request.
Please note, the Partner SE requesting the Threat Grid Lab license MUST be at Stage 4 or higher in the
Fire Jumper Advanced Threat Competency Area before the Lab license will be provided. To learn more
about the Fire Jumper Program, please visit the Partner Security Community post at
https://communities.cisco.com/docs/DOC-55046. Partner SEs may also learn about the requirements to
reach Stage 4 or higher in the Advanced Threat Competency Area at
https://communities.cisco.com/docs/DOC-57818.
15.1.1 POV License: Cisco Threat Grid
Question
o Product type [Cisco Threat Grid]
o Partner SE Name [Partner SE Name]
o Partner SE Email Address [Partner SE Email Address]
o POV License for [Customer Company Name]
o Customer Point of Contact [Customer POC Name]
o Customer Point of Contact Role [Customer POC Role]
71
Example Question
o Partner SE Name [Harry McDonald]
o Partner SE Email Address [hmcdonald@partner.com]
o Customer Point of Contact Role [Security Administrator]
Upon receiving this case, Partner Help will forward the request to the Threat Grid Provisioning team.
Once the team has provisioned the subscription, the Customer Point of Contact will receive an email
from the Threat Grid Provisioning team with API license key to use for the subscription. One 45-day API
license key extension will be granted when required. To receive the extension, open a new partner help
case following the same process above noting this is an extension to an existing POV license key.
15.1.2 Lab License: Cisco Threat Grid
Question
o Partner Company Name [Company Name]
72
Example Question
o Partner Company Name [Partner Company, Inc.]
o Partner SE Name [John Doe]
o Partner SE Title [Security Presales Engineer]
o Partner SE Email Address [jdoe@partner.com]
If multiple Partner SE Lab licenses are required with the Partner Organization, please provide the
information for each Partner SE in the email. Upon receiving this case, Partner Help will forward the
request to the Threat Grid Provisioning team. Once the team has provisioned the subscription, the
Partner SE will receive an email from the Threat Grid Provisioning team with API license key to use for
the subscription. Unlimited 6-month API license key extensions will be granted when required. To
receive the extension, open a new partner help case following the same process above noting this is an
extension to an existing Partner Lab license key.
15.1.3 Meraki Integration: Cisco Threat Grid
Threat Grid integration with Meraki is now supported and the process to request Customer POV / Lab
licenses is the same, but the mechanism to enable the integration is listed below.
Integrating Meraki and Threat Grid:
Step 1: Log into Meraki as an organization admin and go to Organization > Settings
Step 2: Scroll down to Threat Grid and choose an Integration type (NOTE: This will be set to
Disabled by default)
Step 3: Choosing Cloud brings up status indicating it has not yet been set up, so click the link to
initiate the integration (NOTE: On-Premise will require an API key and URL)
Step 4: You will be redirected the user to the Threat Grid portal, so log in if necessary
Step 5: Authorize Meraki to interact with your Threat Grid account
Step 6: After authorized, the user will be redirected back to the Meraki dashboard where they
will see a successful integration status message
Per MX/Network configuration: Users can use this to control the integration at a more granular level
and change it over time as necessary
Step 1: Go to Security Appliance > Threat Protection for a particular network
Step 2: There is a new section that will allow you to enable/disable Threat Grid for specific
networks and also set a per-network rate limit
73
16 Stealthwatch
16.1 Software Access and License Request: Stealthwatch
16.1.1 Software Access and POV License Request: Stealthwatch
To complete a Software Access and POV License Request, please reach out to your Global Security Sales
Account Manager or your Stealthwatch Security Account Manager to complete the process. If you are
unsure who this person might be or if you have any issues with the process, you can send an email to
stealthwatch-partner@cisco.com with the POV Customers Name, City, and State to request assistance.
16.1.2 POV License Renewal: Stealthwatch
Partner Help supports license renewals for POVs. License duration is dependent on internal tools, but
the goal is to provide a single 45-day license extension with business justification. To complete a POV
License Renewal, open a case with Partner Help. You can go to www.cisco.com/go/ph and under
5-1-1. In the case, provide the following required information and enter desired software in the
Question field.
Subject = Customer Opportunity POV License Extension
Question
o Product type [Stealthwatch]
o POV License for [Customer Name]
o Customer Point of Contact [Customer Contact Name]
o Opportunity in $USD [Opportunity in USD]
o Stealthwatch Management Console (SMC) Serial Number [SMC Serial Number]
o Flow Collector Serial Number [FC Serial Number]
o Flow Sensor Serial Number (If installed) [FS Serial Number]
o Flow Replicator Serial Number (If installed) [FR Serial Number]
74
Example Question
o POV License for [ACME Inc.]
o Partner SE Name [Joseph Doe]
o Partner SE CCO ID [joedoe]
o Customer Point of Contact [Will E. Coyote]
o Opportunity in $USD [$100k USD]
o Stealthwatch Management Console (SMC) Serial Number [ABC123]
o Flow Collector Serial Number [CBA321]
o Flow Sensor Serial Number (If installed) [XYZ789]
o Flow Replicator Serial Number (If installed) [ZYX987]
Upon receiving this case, Partner Help will forward the request to the Threat Grid Provisioning team.
16.1.3 Software Access and Lab License Request: Stealthwatch
To complete a Software Access and Lab License Request, open a case with Partner Help. You can go to
www.cisco.com/go/ph and under Engage Global Virtual Engineering (GVE), select open a case or call
1.800.553.6387 and select Options 5-1-1. In the case, provide the following required information and
enter desired software in the Question field.
Partner Help supports license requests for Partner Labs. License duration is dependent on internal tools,
but the goal is to provide 1-year license keys for Labs. Stealthwatch software is not available directly to
partners yet from CCO, so software access and Lab licensing requests are combined for Stealthwatch
requests. Upon receiving the required information below, Partner Help will assist in providing
instructions for downloading Stealthwatch software.
Subject = Software Access and Lab License Request
Question
o License Type [Lab]
75
Example Question
o License Type [Lab]
Once the instructions have been provided, download and install the appropriate files for the
Stealthwatch deployment and continue to the next section for collecting serial numbers.
16.1.4 Device Serial Numbers for License Entitlement: Stealthwatch
Once the necessary software has been installed, browse the Admin web interface from each device and
utilize the existing case to provide the serial numbers from the SMC, Flow Collector, and optional Flow
Sensor VE / Flow Replicator VSE to the Partner Help Agent. To find the Device Serial Number from the
Admin web interface of EACH device, browse to Home and copy the ENTIRE serial number found in the
lower right corner. Once these have been provided, the Partner Help Agent will then assist to help
generate the appropriate license keys.
16.2 Online / Offline License Activation: Stealthwatch
Stealthwatch licenses need to be activated on each product through either the online or offline
activation process. For each license, access the Admin web interface and browse to Configuration >
Licensing.
76
16.2.1 Online License Activation: Stealthwatch
If the device has Internet access, select Online Licensing and click Activate.
If the process succeeds, a confirmation message will appear. Click OK to close the dialog box.
77
16.2.2 Offline License Activation: Stealthwatch
If Internet access is not possible on the device, the alternative method is to manually install the licenses
for each device. The same process as above would be followed, but instead select Offline Licensing,
browse to the location where the appropriate file is saved, select the file, and click Activate.
If the process succeeds, a confirmation message will appear. Click OK to close the dialog box.
78
17 Cisco Defense Orchestrator
17.1 License Request: Cisco Defense Orchestrator
Partner Help supports license requests for both POVs and Partner Labs and provides license extensions
with business justification. There is no software access or required product information for the Cisco
Defense Orchestrator license request.
17.1.1 POV License: Cisco Defense Orchestrator
Question
o Product type [Cisco Defense Orchestrator]
o POV License for [Customer Company Name]
o Customer Point of Contact [Customer POC Name]
o Customer Point of Contact Role [Customer POC Role]
79
Example Question
o Customer Point of Contact Role [Security Administrator]
Upon receiving this case, Partner Help will forward the request to the Cisco Defense Orchestrator
Provisioning team. Once the team provisioning team receives and processes the request, an email with
the registration token to the Cisco Defense Orchestrator OneLogin Portal and instructions on how to
access the Portal will be generated and sent back to the Customer Point of Contact. To receive the
extension, open a new partner help case following the same process above noting this is an extension to
an existing POV license.
17.1.2 Lab License: Cisco Defense Orchestrator
If you are interested in individual access to demo and test CDO, please proceed with leveraging dCloud
which is fully pre-populated with devices for a full and completed CDO experience. To access the dCloud
CDO demo, you can go to dcloud.cisco.com and log in with your CCO credentials. Once logged in, select
Catalog and enter CDO into the Search criteria. Select View for the Cisco Defense Orchestrator v1
Instant Demo option to access the CDO Demo instance.
We can also assist with a Partner Lab license which provides a single cloud tenant account that can be
used for testing by all engineers within your organization. To request a Lab License, open a case with
Partner Help. You can go to www.cisco.com/go/ph and under Engage Global Virtual Engineering
(GVE), select open a case or call 1.800.553.6387 and select Options 5-1-1. In the case, provide the
following required information. Upon requesting, please include all Partner SE names and email
addresses of those who will need access.
80
Question
o Partner Company Name [Company Name]
81
Example Question
o Partner SE Name [John Doe]
o Partner SE Email Address [jdoe@partner.com]
o Partner Company Name [Partner Company, Inc.]
Upon receiving this case, Partner Help will forward the request to the Cisco Defense Orchestrator
Provisioning team. Once the team provisioning team receives and processes the request, an email with
the registration token to the Cisco Defense Orchestrator OneLogin Portal and instructions on how to
access the Portal will be generated and sent back to the Partner SE. To receive the extension, open a
new partner help case following the same process above noting this is an extension to an existing
Partner Lab license.
18 Next Steps
This completes the Cisco Security Licensing and Software Access guide for partners. For additional
support, post questions on the partner security community: www.cisco.com/go/securitychannels.
Below are some key resources to meet the program requirements and continue your education.
Cisco Partner Security Community

https://www.cisco.com/go/securitychannels
Voice of the Engineer
https://communities.cisco.com/docs/DOC-30718
Fire Jumper Program
POV Best Practices
19 Change Log
5/29/2015: Added support for POV license requests on Web Security Appliance (WSA), Email
Security Appliance (ESA), and Security Management Appliance (SMA) physical appliances
8/25/2015: Added support for lab license requests for ASAv, CSM, and ACS. Added support for
POV license requests for AMP for Endpoint and CWS.
6/25/2016: Added support for POV license requests for CES, Firepower Threat Defense, and
Stealthwatch and updated requirements for CWS. Clarified that SN is required for all ESA, WSA,
and SMA submissions.
8/11/2016: Added support for downloading and licensing FMC for FTD.
82
10/11/2016: Added support for Cisco Smart Licensing for FMC and FTD. Clarified that partners
may only have one joint AMP for Endpoints lab account.
12/19/2016: Updated Smart License support information for applicable products.
02/17/2017: Updated Stealthwatch POV license support and PH engagement information
4/20/17: Added support for Cisco Threat Grid and Cisco Defense Orchestrator Lab and POV
licensing.
10/06/17: Added Cisco Cybersecurity Partner Account Manager (CyPAM) field as well as
mandatory requirement for Cisco Deal ID for any POV License request
83

Cisco Security Licensing and Software Access 171028

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Cisco Security Licensing and Software Access 171028

Încărcat de

Drepturi de autor:

Formate disponibile

Cisco Security Licensing and

Software Access Process

Global Security Sales Organization (GSSO)

3 Firepower Management Center (FMC) ............................................................................ 11

4 Firepower Threat Defense (FTD) ...................................................................................... 19

5 Firepower Services for ASA or Firepower ...................................................................... 24

6 Adaptive Security Appliance (ASA) ................................................................................... 31

6.2.4 Lab License: ASA ...................................................................................................................... 38

7 Adaptive Security Virtual Appliance (ASAv).................................................................. 40

8 Cisco Security Manager (CSM) ............................................................................................ 45

9 Identity Services Engine (ISE) ............................................................................................. 47

10 Access Control System (ACS) ............................................................................................... 50

11 Web Security Appliance (WSA) .......................................................................................... 53

12 Email Security Appliance (ESA).......................................................................................... 57

13 Security Management Appliance (SMA) .......................................................................... 61

13.2.1 POV License: SMA.................................................................................................................... 63

14 License Request: CWS ............................................................................................................ 65

15 Cloud Email Security (CES) .................................................................................................. 66

14 Advanced Malware Protection (AMP) for Endpoint ................................................... 69

15 Cisco Threat Grid ..................................................................................................................... 71

17 Cisco Defense Orchestrator ................................................................................................. 79

2 Cisco Smart Licensing

2.1 Creating a Cisco Smart Account

2.2 Smart Licensing Account Activation Example

2.2.1 Smart License Account Activation: FTD

2.2.2 Smart License Registration Example

3 Firepower Management Center (FMC)

3.1 Software Download: FMC

To download the Firepower software, go to http://software.cisco.com/download/navigator.html. This

Firepower Management Center Virtual64 VMWare

3.2 Software Request: FMC

3.3 License Request: FMC

3.3.1 POV Smart License: FMC

NOTE: A CCW Deal ID is mandatory for this service.

3.3.2 Lab Smart License: FMC

o Partner Smart Virtual Account [Smart Virtual Account Name]

3.3.3 POV Classic License: FMC

CCW Deal ID = [Deal ID]

NOTE: A CCW Deal ID is mandatory for this service.

3.3.4 Lab Classic License: FMC

4 Firepower Threat Defense (FTD)

4.1 Software Download: FTD

NOTE: The ASA5585-X platforms do not support FTD software.

4.1.1 Software Request: FTD

4.2 License Request: FTD

4.2.1 POV Smart License: FTD

NOTE: A CCW Deal ID is mandatory for this service.

4.2.2 Lab License: Cisco Smart Licensing for FTD

5 Firepower Services for ASA or Firepower

5.1 Software Download: Firepower Services for ASA or Firepower

To download the Firepower Services for ASA software, go to

To download the Firepower software, go to http://software.cisco.com/download/navigator.html. This

5.1.1 Software Request: Firepower Services for ASA or Firepower

5.2 License Request: Firepower Services for ASA or Firepower

5.2.1 POV License: Firepower Services for ASA or Firepower

o Partner Fire Jumper CCO ID [Partner Fire Jumper CCO ID if applicable]

NOTE: A CCW Deal ID is mandatory for this service.

5.2.2 Lab License: Firepower Services for ASA or Firepower

6 Adaptive Security Appliance (ASA)

6.1 Software Download: ASA5500-X and Firepower 2100/4100 / 9300

To download the ASA system software, go to http://software.cisco.com/download/navigator.html. This

As an example to download the Firepower 4110 system software, go to

6.1.1 Software Request: ASA

6.2 License Request: ASA