Licenses
The Secure Firewall migration tool does not require any additional license to be accessed from Security Cloud Control.
However, you need to have a Security Cloud Control base subscription and licenses for the threat defense features you want to migrate.