The ASA FirePOWER module uses a separate licensing mechanism from the ASA. No licenses are pre-installed, but the box includes a PAK on a printout that lets you obtain a license activation key for the following licenses:

  • Control and Protection —Control is also known as “Application Visibility and Control (AVC)” or “Apps”. Protection is also known as “IPS”. In addition to the activation key for these licenses, you also need “right-to-use” subscriptions for automated updates for these features.

The Control (AVC) updates are included with a Cisco support contract. The Protection (IPS) updates require you to purchase the IPS subscription.

Other licenses that you can purchase include the following:

  • Advanced Malware Protection (AMP)
  • URL Filtering

These licenses do generate a PAK/license activation key for the ASA FirePOWER module.