In short
Cisco licensing works by part number: a top-line subscription code sets the term, then edition codes set the quantity per user, endpoint or firewall. Most products come on annual terms, and Duo, Umbrella, Secure Endpoint, Secure Access and XDR can also be billed monthly. Forever Systems, a Cisco Partner, can quote the right codes and set them up.
Get a quote for Cisco licensing
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
The Cisco portfolio we supply
Cisco sells its security, networking and assurance software as subscriptions, each with its own ordering guide and its own part numbers (Cisco calls them PIDs, product IDs). The table lists every Cisco family we quote on this site, what it covers, what one licence counts and where to find its part numbers. Each family page lists the current orderable codes with an Add button, the units and terms Cisco publishes, and the old codes they replace.
| Product family | What it covers | Licensed by | Part numbers |
|---|---|---|---|
| Cisco Duo | MFA, single sign-on and device trust | Per user | Duo part numbers |
| Cisco Identity Services Engine (ISE) | Network access control and TACACS+ device administration | Per active endpoint, plus virtual node licences | ISE part numbers |
| Cisco Secure Client (formerly AnyConnect) | Remote access VPN client | Per unique user | Secure Client part numbers |
| Cisco Umbrella | DNS security and secure internet gateway | Per covered user | Umbrella part numbers |
| Cisco Secure Access | Security service edge: internet access, private access (ZTNA) and DNS Defense | Per covered user | Secure Access part numbers |
| Cisco Secure Endpoint (formerly AMP for Endpoints) | Endpoint protection and EDR | Per endpoint | Secure Endpoint part numbers |
| Cisco Secure Email | Email gateway bundles and Email Threat Defense for Microsoft 365 | Per user | Secure Email part numbers |
| Cisco XDR | Extended detection and response across Cisco and third-party tools | Per covered user | XDR part numbers |
| Cisco security suites | User Protection and Breach Protection Suites | Per covered user | Suite part numbers |
| Cisco Talos Incident Response | Incident response retainers attached to Duo, ISE and Secure Firewall | Per retainer | Talos IR retainer part numbers |
| Cisco Secure Firewall | Threat Defense Virtual, appliance feature licences and logging | Per firewall or virtual instance | Secure Firewall part numbers |
| Cisco Security Cloud Control | Cloud-delivered firewall management | Per tenant, with per-device management | Security Cloud Control part numbers |
| Cisco Multicloud Defense | Network security for AWS, Azure and Google Cloud | Gateway hours | Multicloud Defense part numbers |
| Cisco Cyber Vision | OT and industrial asset visibility | Per monitored endpoint | Cyber Vision part numbers |
| Cisco ThousandEyes | Network and internet assurance | ThousandEyes Units, per user or per device | ThousandEyes part numbers |
| Cisco WAN licensing | Networking Subscription tiers for Cisco routers | Per router, by platform class | WAN licence part numbers |
| Cisco Meraki | Cloud-managed wireless, switching, security appliances and cameras | Per device | Meraki licence SKUs (opens in a new tab) on Cloud Networking UK |
Cisco Meraki licences have their own home on Cloud Networking UK, our Cisco Meraki store, so the Meraki row links there rather than repeating every Meraki SKU here.
Not sure which licence fits? Ask us
Tell us what you need and we will recommend the right licence for your organisation, with a quote.
How Cisco licensing works
Most Cisco software is ordered in two layers. A top-line subscription code, such as DUO-SUB, SECURE-ACCESS-SUB or FTDV-SEC-SUB, sets the start date, term and billing for one customer. Under it sit the codes for what you actually use: an edition or tier, the quantity of users, endpoints or instances, any add-ons and a support level. A quote for one product therefore lists several part numbers, and the quantity sits on the edition line rather than the top line.
- Terms: subscriptions usually run from 12 to 60 months; Cisco's Duo ordering guide, for example, lists standard terms of 12 to 60 months. Renewal options are confirmed at quote.
- Adding licences: Cisco's ordering guide for providers says quantities added through a change-subscription order co-terminate with the existing subscription, so additions share one renewal date.
- Where licences live: many Cisco licences are registered to your organisation's Smart Account. ISE requires one, and Secure Client licences used with Threat Defense firewalls are shared to it. See Cisco Smart Licensing (opens in a new tab) for how Smart Accounts and virtual accounts work.
- Ordering: Cisco partners raise quotes and orders in Cisco Commerce (CCW), Cisco's ordering tool, using the same part numbers you see on these pages.
- Units differ by product: Duo, Umbrella, Secure Access and Secure Client count users; Secure Endpoint counts endpoints; ISE counts active endpoints; firewalls are licensed per appliance or virtual instance; ThousandEyes uses its own Units.
The comparison below puts the main codes side by side for the Cisco families that Cisco publishes under more than one buying route. Each family page has the full list, add-ons and support included.
Cisco licensing and buying at a glance
| Buying question | Answer |
|---|---|
| Licensed by | By product: per user (Duo, Umbrella, Secure Access, Secure Client), per endpoint (Secure Endpoint, ISE active endpoints) or per firewall instance |
| Billing | Annual or prepaid term, or monthly through Cisco's MSP programme and the MSLA, confirmed at quote |
| Minimum | By product, for example 50 covered users (Secure Access), 50 endpoints (ISE), 25 users (Secure Client) |
| How to buy | Ask us for a quote |
Source: Cisco Security Ordering Guide for Providers (opens in a new tab), checked 8 November 2026.
Cisco monthly MSP, annual and MSLA codes compared
The top-line and main edition codes for the Cisco families that Cisco publishes under more than one buying route, side by side. Umbrella codes can be ordered until 31 January 2027 under Cisco's notice EOL15975, and Secure Access replaces them for new buyers. Each family page has the full list, with add-ons and support.
| Product | Unit | Monthly MSP part number | Annual part number | MSLA part number |
|---|---|---|---|---|
| Secure Access subscription (top line) | One per customer | PRP-SECACC-SUB | SECURE-ACCESS-SUB | Not listed |
| Secure Internet Access Essentials | Per covered user | PRP-SA-SIA-ESS | SA-SIA-ESS | Not listed |
| Secure Internet Access Advantage | Per covered user | PRP-SA-SIA-ADV | SA-SIA-ADV-K9 | Not listed |
| Umbrella subscription (top line) | One per customer | UMB-SEC-SP-SUB | UMB-SEC-SUB | Not listed |
| Umbrella DNS Security Advantage | Per covered user | UMB-DNS-ADV-K9-SP | UMB-DNS-ADV-K9 | SPLA-UMB-DNS-A-K9 |
| Secure Firewall Threat Defense Virtual | Per Threat Defense Virtual deployment | Not listed | FTDV-SEC-SUB | MSLA-FTDVSEC-SUB |
Part numbers from Cisco Secure-Access-Sub Ordering Guide (opens in a new tab); Cisco Security Ordering Guide for Providers (opens in a new tab); Cisco EOL15975, Umbrella SIG and DNS (opens in a new tab); Cisco EOL15688, legacy Umbrella offers (opens in a new tab); Cisco Network Security Ordering Guide (opens in a new tab); Cisco MSLA Product Terms, Threat Defense Virtual (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.
Is Cisco licensing the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Three ways to buy Cisco: annual, MSP programme and MSLA
Cisco sells the same products through different buying routes, and the route changes the part numbers, the billing and how quantities are counted:
- Annual (price list): the standard route. You choose a term, typically 12 to 60 months, billed annually or prepaid, with the details confirmed at quote.
- Cisco's MSP programme: Cisco's programmes for managed service providers. Secure MSP Center offers monthly packages for Duo, Secure Endpoint and Umbrella; Provider Pricing publishes PRP- codes for Secure Access, XDR and the security suites. Forever Systems supplies Duo, Umbrella and Secure Endpoint through Secure MSP Center, per user or endpoint, billed monthly, with terms confirmed at quote.
- MSLA: Cisco's Managed Services License Agreement, a monthly, usage-based route, with published codes for products such as Umbrella DNS Security Advantage and Threat Defense Virtual.
Forever Systems buys Cisco security mainly through Cisco's MSP programme (Secure MSP Center) and also through the MSLA, so most Cisco security can be billed monthly on the users or endpoints you protect. Annual subscriptions sit alongside them where a fixed term suits your budget better.
Route by product
| Product | Annual (price list) | Cisco's MSP programme | MSLA |
|---|---|---|---|
| Duo | Codes listed | Monthly, confirmed at quote | Confirmed at quote |
| Umbrella | Codes listed, orderable until 31 January 2027 | Codes listed | Codes listed |
| Secure Access | Codes listed | Codes listed (Provider Pricing) | Ask us |
| Secure Endpoint | Codes listed | Monthly, confirmed at quote | Confirmed at quote |
| XDR | Confirmed at quote | Codes listed (Provider Pricing) | Confirmed at quote |
| Security suites | Confirmed at quote | Codes listed (Provider Pricing) | Ask us |
| ISE | Codes listed | Ask us | Ask us |
| Secure Client | Codes listed | Ask us | Ask us |
| Secure Email | Codes listed | Ask us | Ask us |
| Secure Firewall (Threat Defense Virtual) | Codes listed | Ask us | Codes listed |
| Cyber Vision | Codes listed | Ask us | Confirmed at quote |
| ThousandEyes | Codes listed | Ask us | Ask us |
"Codes listed" means the part numbers are on the product page. "Confirmed at quote" means Cisco offers the route and we confirm the code in your quote. Talos retainers, Security Cloud Control, Multicloud Defense and WAN licences are listed on annual codes; ask us about other routes for them.
Licences tied to an appliance
Some Cisco licences are bought for one piece of hardware, and their part numbers name the appliance model they belong to:
- Firewall feature licences: the Threat, Malware Defense and URL Filtering subscriptions for physical Secure Firewall appliances
- Per-device firewall management: Security Cloud Control Firewall Management licences for each managed appliance
- Cyber Vision sensor licences: the intrusion detection licence for each network sensor
- Older Cisco DNA term licences for Catalyst switches, quoted per switch
For these, tell us the hardware you have, or its serial numbers, and we confirm the matching part number for each appliance when we quote. Virtual firewalls, cloud services and per-user or per-endpoint subscriptions are listed by part number on their product pages, ready to add to your basket.
Old Cisco product names and their current names
Cisco has renamed several products, and old names often survive on renewal notices and older quotes. If yours shows one of these, this is where the current part numbers are:
| Old name | Current name | Part numbers |
|---|---|---|
| AnyConnect Plus, Apex and VPN Only | Secure Client Advantage, Premier and VPN Only; the codes keep their AnyConnect roots (PLS, APX, VPNO) | Secure Client |
| AMP for Endpoints | Secure Endpoint; the codes keep the AMP4E prefix | Secure Endpoint |
| Cisco Defense Orchestrator | Security Cloud Control | Security Cloud Control |
| Cloud Mailbox Defense | Email Threat Defense, ordered under ETD-SEC-SUB | Secure Email |
| Legacy Umbrella offers | The UMB-SEC-SUB family, after Cisco's end-of-sale notice EOL15688 in 2025 | Umbrella |
| Umbrella SIG and DNS | Cisco Secure Access, after notice EOL15975: Umbrella codes can be ordered until 31 January 2027 and renewed or added to until 31 January 2028 | Secure Access |
The Umbrella, Secure Endpoint and Secure Email pages also list the specific end-of-sale codes and the codes that replace them.
Buying Cisco through Forever Systems
Forever Systems, a Cisco Partner, quotes Cisco on annual subscriptions from Cisco's price list, through Cisco's MSP programme and under the MSLA, so we can compare the route that suits your budget and how often your numbers change.
- Tell us what you have: users, endpoints, firewalls and sites, plus any Cisco renewal notices or old part numbers.
- Build a basket: add the part numbers you are interested in from any Cisco page; the basket goes with your enquiry.
- Quote: we confirm the codes, quantities, term and billing, monthly or annual, and can show routes side by side.
- Set up and change: we can set up the licences in your Cisco accounts and help with additions, edition changes and renewals.
For Meraki, see the Cisco Networking Subscription (opens in a new tab) and Meraki licence pages on Cloud Networking UK. Compare Cisco with other vendors on our vendors A to Z, or browse firewalls and network security and SASE, ZTNA and business VPN. Contact us for a quote or a second opinion on a Cisco renewal.
Cisco part numbers by product
How Forever Systems supplies your software licences
Forever Systems supplies business software subscriptions to UK organisations from one account, with one invoice and a team who know the products.
- Help choosing the right edition: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from our engineers, not just a reseller account
- Consolidated billing and renewal reminders to help stop subscriptions lapsing unexpectedly
We can supply businesses, schools, charities and public sector organisations of all sizes.
Frequently asked questions
How is Cisco software licensed?
Mostly as subscriptions ordered by part number: a top-line subscription code for the term, then edition or tier codes for the number of users, endpoints or instances, plus add-ons and support. A few licences, such as Secure Client VPN Only and some ISE licences, are perpetual.
What is a Cisco part number (PID)?
PID is Cisco's product ID: the code for one orderable item, such as DUO-ADVANTAGE or PRP-XDR-SEC-SUB. Quotes, renewal notices and Cisco's ordering guides all use it, so quoting by part number makes sure you get the right edition, route and term.
Can Cisco licences be billed monthly?
Yes, for many products. Forever Systems supplies Duo, Umbrella and Secure Endpoint through Cisco's MSP programme, billed monthly per user or endpoint. Secure Access, XDR and the security suites have Provider Pricing codes, and the MSLA covers products such as Threat Defense Virtual. Terms are confirmed at quote.
Where are my Cisco licences held?
Many Cisco licences are registered to your organisation's Smart Account, which ISE requires. We can help you set one up or use the one you already have.
Do you supply Cisco Meraki licences?
Yes. Meraki licences are on Cloud Networking UK, our Cisco Meraki store, which lists every Meraki licence SKU with its own quote basket, linked from the portfolio table above.
Can you co-term Cisco renewals?
Cisco's provider guide says quantities added through a change-subscription order co-terminate with the existing subscription, so additions share one renewal date. We can also help line up renewal dates across your Cisco products where Cisco's terms allow, confirmed at quote.
Can I still buy Cisco Umbrella?
Yes, for now. Under Cisco's end-of-sale notice EOL15975, Umbrella SIG and DNS codes can be ordered until 31 January 2027 and renewed or added to until 31 January 2028. Cisco Secure Access replaces them: see Secure Access part numbers.
How do I get a price for Cisco licences?
Add the part numbers to your basket and send them with your enquiry, or simply tell us what you need. Cisco pricing depends on the route, term and quantity, so ask us for a quote for your exact codes.
Still have a question about Cisco licensing?
Ask us and a member of our team will get back to you.