ASMS licensing

This topic describes how to obtain and install ASMS licenses, as well as track license usage across your devices.

AlgoSec licenses control the AFA modules available, whether FireFlow, AppViz, or Application Discovery are available, the number of routers supported, and more.

AlgoSec Licensing: Watch to learn about the ASMS license types available.

Obtain a license

Do the following to obtain a new license key:

  1. Log in to http://portal.algosec.com using your username and password.

  2. At the top of the screen, click .

  3. Populate the request form as follows:

    Product/s

    Select the product you want a license for.

    If you want a license for multiple products, select AlgoSec Suite.

    Note: To use Application Discovery, your license must also include Application Discovery support.

    For more details see Welcome to Application Discovery and Deploy Application Discovery .
    Internet Connection

    Select whether your AFA server can connect to the internet while activating the license.

    For details, see Online license requirements.
    AlgoSec Server MAC Address

    Enter the MAC address of your AFA server. To find the MAC address, do the following:

    1. Browse to https://<AFA_server>/algosec/, where <AFA_server> is the AFA server URL.
    2. Click AlgoSec Appliance Status.

    Note: If your AFA server has multiple interfaces, make sure to submit the MAC address of the eth0 interface.
    License Key For Select your customer status.
    Number of Firewalls Enter the number of firewalls you want to manage with AFA
    Comments

    Enter any additional comments required.

    • If you need an offline license, enter: Please provide an offline license

    • If the license will be used for a prospect, name the account

  4. Click Submit.

    Your license is sent to the email address you used to log in to the AlgoSec portal. Save it to a location accessible by the AFA server.

Online license requirements

AlgoSec provides online licenses, which are inactivated to start.

To activate your license, ensure that the AFA server can access the AlgoSec licensing server, including the following:

Internet connection

The AFA server must be connected to the internet.

If your AFA server cannot connect to the internet for the duration of the license activation, request a pre-activated, offline license from AlgoSec.

For details, see Obtain a license.

Note: Offline licenses may take several days to issue.
Proxies

If your browser settings use a proxy, you must also configure AFA to use the proxy.

For details, see Define a proxy server.
HTTPS traffic

Your connection must allow HTTPS traffic (TCP/443) from your AlgoSec server to license.algosec.com.

Outbound web proxies must not manipulate or sanitize traffic.

No data about the configuration of analyzed devices is passed back to AlgoSec over the internet or to any third party.

Install a license

This procedure describes how to install a license on your Central Manager (or standalone server). For details about obtaining your license, see Obtain a license.

Note:

For HA/DR clusters: To install a license, see instructions on this page Install license to an HA/DR cluster.

Do one of the following:

  1. Click your username at the top right, and select License. The License Information dialog appears. For example:

  2. In the License Information dialog, click Install License.

  3. Accept the End-User License Agreement that appears.

  4. In the License Installation dialog, click Select a File. Then, browse to and select the license file (license.lic) you received by email. For example:

  5. Click Install.
  6. Log out of AFA, and then log in again.

Tip: Before you start, make sure to copy the license file received by email to the CM.

  1. Open a terminal and login as user: root

  2. Connect to the ASMS Administration interface. For details, see Connect to and Utilize the Administration Interface.

  3. Enter 12 - Install License.

  4. When prompted, enter the path to the license file (license.lic) you received by email.

    The license is installed.

Install license to an HA/DR cluster

Before building the cluster, all primary and secondary nodes require a license installed.

Do the following:

  1. Copy the license file (license.lic) received from email to the local drive of each primary and secondary nodes that does not already have a license installed.

  2. For the each node without a license:

    1. Open a terminal and login as user: root

    2. Connect to the ASMS Administration interface. For details, see Connect to and Utilize the Administration Interface.

    3. Enter 12 - Install License.

    4. When prompted, enter the local path to the license file.

      The license is installed.

  3. Build the cluster when you're done. For details, Build a cluster.

License usage

An ASMS license is used for every on-premises or private cloud device shown at the lowest level of the device tree.

For example, the highlighted devices in the following image each consume a single license.

Note: Some exceptions exist. For details, see AlgoPedia.

Virtual router licensing

  • In LSYS/VSYS systems, licenses are consumed at the LSYS/VSYS level instead of the virtual router (VR level). This means that using multiple VRs in a single VSYS consumes only one license.
  • During upgrades, any licenses consumed by VRs are not calculated towards total consumption.

Public cloud licensing

While public cloud assets (AWS and Azure) do not consume licenses, ASMS does track your public cloud asset usage.

When you renew licenses, AlgoSec sales personnel will check your cloud usage and sell you enough licenses for the number of assets actually in use.

View license usage statistics

Do the following:

  1. In AlgoSec Firewall Analyzer, click your username at the top right, and select License.

    The License Information window appears. For example:

  2. Click the links at the bottom of the dialog to download license usage spreadsheets:

    License Usage

    Licenses consumed by all on-premises devices.

    Tip: Scroll to the bottom of the report to view a list of deleted devices.

    Sample on-premises and private cloud license usage report

    Public Cloud Usage

    Cloud asset details, including the following:

    • Number of cloud assets managed by ASMS, sampled hourly
    • Top monthly average count, per year.

    Sample public cloud license usage report

    Note: License usage spreadsheets are protected against modifications.

Tip: If you are having issues where different locations in your system are showing different numbers of devices and licenses used, reload your license and check again. This updates the data for any devices that had been deleted or modified and clarifies the statistics.

The following table shows a shortened sample license usage report. While we've removed some rows, we've left the full total counts complete.

Tip: Zoom in on your browser to view the larger text in this sample.

License Type Total
Topology Infrastructure Devices 1            
Virtual Firewall 33            
Stand-Alone Firewall 16            
Total 50            
               
Active Devices
License Type Brand Display Name Tree Name Device IP Parent Name Last Completed Report Device License ID
Stand-Alone Firewall Check Point Clover Clover 172.31.10.125 N/A afa-10451 Clover
Stand-Alone Firewall Check Point Rose_checkpoint Rose_checkpoint 10.82.18.20 m_10_20_12_1 afa-193 192.168.6.254
…              
Topology Infrastructure Devices Cisco router 10.20.15.1 10_20_15_1 10.90.15.5 N/A afa-159 10_20_15_1
Virtual Firewall Cisco ASA 10.20.245.1_admin admin 10.20.245.1 10_20_245_1 afa-557 admin
Virtual Firewall Fortinet FortiManager Violet_Fortinet Violet_Fortinet 10.82.18.20 N/A afa-531 192.168.6.254
…              
               
Deleted Devices
License Type Brand Display Name Tree Name Device Ip Parent Name Last Completed Report Device License ID
Virtual Firewall Juniper - Junos Space Security Director Event-Horizon_APEX Event_Horizon_APEX 198.1.1.1 N/A afa-154 Event_Horizon_APEX
Virtual Firewall Juniper - Junos Space Security Director Event-Horizon_ARO_SMT Event_Horizon_ARO_SMT 192.168.101.254 N/A afa-155 Event_Horizon_ARO_SMT
…              
Summary - Top monthly average
Year Top Month Month avg. AWS_Assets Month avg. Azure_Assets Month avg. total
2019 May 635 42 677
         
Report produced on: 30-May-2019      
         
Breakdown        
Date Hour AWS_Assets Azure_Assets Total
27-May-19 11 570 0 570
27-May-19 12 570 0 570
27-May-19 13 570 0 570
27-May-19 14 570 0 570

Update licenses

Contact AlgoSec to update your licenses in the following scenarios:

Expired licenses

When there are less than 45 days remaining on your license, the License link in the Administration menu turns red.

To ensure continuous use, make sure to update your license before it expires.
Exceeded licenses

Your license is valid for a specific number of devices or reports.

Update your license if you require additional devices or reports.

See also: Public cloud licensing
ASMS product upgrades To upgrade your AlgoSec solution with additional modules or components, you must also update your license.