License Types and Restrictions

Base

Based on license type

Perpetual or Subscription

Except for Specific License Reservation and the Secure Firewall 3100, base perpetual licenses are automatically assigned with all FTDs.

User and application control

Switching and routing

NAT

For details, see Base Licenses.

Threat

• T

• TC (Threat + URL)

• TMC (Threat + Malware + URL)

Subscription

Intrusion detection and prevention

File control

Security Intelligence filtering

For details, see Threat Licenses

Malware

• TM (Threat + Malware)

• TMC (Threat + Malware + URL)

• AMP

Subscription

Malware defense

Threat Grid

File storage

For details, see Malware Licenses and License Requirements for File and Malware Policies.

URL Filtering

• TC (Threat + URL)

• TMC (Threat + Malware + URL)

• URL

Subscription

Category and reputation-based URL filtering

For details, see URL Filtering Licenses.

Export-Controlled Features

No subscription required

Perpetual

Features that are subject to national security, foreign policy, and anti-terrorism laws and regulations; see Licensing for Export-Controlled Functionality.

Remote Access VPN:

• AnyConnect Apex

• AnyConnect Plus

• AnyConnect VPN Only

Based on license type

Subscription or perpetual

Remote access VPN configuration. Your account must allow export-controlled functionality to configure remote access VPN. You select whether you meet export requirements when you register the device. The FTD can use any valid AnyConnect Client license. The available features do not differ based on license type.

For more information, see AnyConnect Client Licenses and VPN Licensing.