End-of-Life and End-of-Support for the Cisco Firepower User Agent


Available Languages

Download Options

  • PDF
    (312.0 KB)
    View with Adobe Reader on a variety of devices
Updated:November 20, 2020

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Available Languages

Download Options

  • PDF
    (312.0 KB)
    View with Adobe Reader on a variety of devices
Updated:November 20, 2020

Table of Contents

  • Overview
  • Product Migration Options
  • For more information




    Cisco announces the end-of-life dates for the Cisco Firepower User Agent

    Software maintenance support for Cisco Firepower User Agent (all versions) will end on 30 November 2020. No patches or maintenance releases will be provided for Cisco Firepower User Agent after 30 November 2020.

    Cisco Firepower User Agent will continue to function with the Cisco Firepower Management Center up to and including version 6.6. However, you will see the following warning message in 6.6 when attempting to add a new User Agent.

    Related image, diagram or screenshot

    Cisco Firepower User Agent is completely deprecated from release 6.7 onwards. You must migrate to ISE-PIC before upgrading to 6.7

    Product Migration Options

    Customers are encouraged to transition to Cisco Identity Services Engine Passive Identity Connector (ISE-PIC).

    Customers with a physical or virtual (FMCv25, FMCv300) Firepower Management Center appliance as mentioned in Table 1 with active support contracts will be eligible to receive Cisco ISE-PIC at no additional cost.

    Table 1.        Eligible Firepower Management PIDs for free ISE-PIC

    End-of-Sale Product

    Eligible PID             

    Replacement Product Part Number

    Replacement Product Description

    Additional Information

    Cisco Firepower User Agent















    L-FMC-ISE-PIC= (PAK based for ISE-PIC 2.7 and lower)



    Smart License Enabled for ISE-PIC 3.0 and above coming soon

    Cisco Identity Services Engine Passive Identity Connector (ISE-PIC).

    Active FMC Support Contracts Required for Eligible PIDs.

    For details on this migration, go to: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215887-firepower-user-identity-migrating-from.html.

    For Firepower Management Center PIDs not mentioned in the table above for free ISE-PIC, please use the standard ISE-PIC PIDs:

          Base license for up to 3,000 user sessions (R-ISE-PIC-VM-K9)

          Upgrade license for up to 300,000 user sessions (L-ISE-PIC-UPG=)

    For more information

    For more information about the Cisco End-of-Life Policy, go to: https://www.cisco.com/en/US/products/products_end-of-life_policy.html.

    For more information about the Cisco Product Warranties, go to: https://www.cisco.com/en/US/products/prod_warranties_listing.html.

    To subscribe to receive end-of-life/end-of-sale information, go to: https://www.cisco.com/cisco/support/notifications.html.

    Any authorized translation issued by Cisco Systems or affiliates of this end-of-life Product Bulletin is intended to help customers understand the content described in the English version. This translation is the result of a commercially reasonable effort; however, if there are discrepancies between the English version and the translated document, please refer to the English version, which is considered authoritative.

    Our experts recommend

    Learn more