In short
Cisco Secure Endpoint is ordered as one AMP4E-SEC-SUB subscription plus an edition licensed per endpoint: Advantage and Premier have published codes, and Essentials is confirmed at quote, as is the term. Forever Systems, a Cisco Partner, supplies Secure Endpoint through Cisco's MSP programme, billed monthly per endpoint, or on an annual subscription.
Get a quote for Cisco Secure Endpoint licences
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What you order for Cisco Secure Endpoint
Cisco Secure Endpoint was called AMP for Endpoints until Cisco renamed it, and the part numbers still carry the old AMP4E prefix. An order has two layers:
- The subscription: AMP4E-SEC-SUB, the Cisco AMP for Endpoints XaaS Subscription. It is the top line for buying or renewing Secure Endpoint in Cisco's public cloud, and it sets the start date and term.
- The edition: the tier your endpoints are licensed for, ordered under that subscription. Cisco publishes AMP4E-ADV-CL-LIC for Secure Endpoint Advantage and AMP4E-PRE-CL-LIC for Secure Endpoint Premier. The Essentials tier code is confirmed at quote.
Organisations that run Secure Endpoint Private Cloud instead of Cisco's public cloud order a separate pair of codes: SEPVTCL-SEC-SUB as the subscription and SE-PVTCL, which Cisco says entitles customers to private cloud connector licences. Cisco named both in its notice retiring the older cloud subscription code on 25 September 2025 (EOL15691 (opens in a new tab)).
For what the product does day to day, see Cisco Secure Endpoint (opens in a new tab) on our Cisco security site. This page covers the part numbers and the routes to buy them.
How Cisco Secure Endpoint licensing works
Secure Endpoint is licensed per endpoint, not per user. Cisco's Secure MSP Center terms say it "is licensed based on quantity of Endpoints and invoiced based on that same usage meter", and its MSLA terms define an endpoint as any device that can process data and access a network, including personal computers, mobile devices and workstations. Each endpoint runs one Secure Endpoint connector, so the count is the number of devices you protect, servers included.
The editions build on each other:
| Edition | What it adds | Part number |
|---|---|---|
| Essentials | Next-generation endpoint protection, continuous monitoring, dynamic file analysis in a sandbox, one-click endpoint isolation and USB device control | Confirmed at quote |
| Advantage | Everything in Essentials, plus the risk-based vulnerability framework, Orbital Advanced Search, Remote Scripts powered by Orbital, Malware Analytics Cloud and Host Firewall | AMP4E-ADV-CL-LIC |
| Premier | Everything in Advantage, plus threat hunting by Cisco Talos | AMP4E-PRE-CL-LIC |
The edition features follow Cisco's Secure Endpoint licence comparison (opens in a new tab); for the monthly MSP packages, see Cisco's Secure MSP Center package comparison (opens in a new tab). For the full edition comparison and what drives cost, see Cisco Secure Endpoint licensing (opens in a new tab).
Order one subscription per customer and one tier for your endpoint count. The term is agreed when we quote, and endpoints added during the term join the same subscription, so they renew on the same date.
Not sure which edition fits? Ask us
Tell us what you need and we will recommend the right edition for your organisation, with a quote.
Cisco Secure Endpoint part numbers
Current Secure Endpoint codes from Cisco's own notices. For the public cloud, order one AMP4E-SEC-SUB per customer and the tier for your endpoint count; for Private Cloud, order SEPVTCL-SEC-SUB with SE-PVTCL. The Essentials tier code and the monthly MSP and MSLA codes are confirmed at quote.
| Part number | Description | Unit | Term | Route | Basket |
|---|---|---|---|---|---|
| AMP4E-SEC-SUB | Secure Endpoint subscription, public cloud (top line) | One per customer | Confirmed at quote | Annual | |
| AMP4E-ADV-CL-LIC | Secure Endpoint Advantage tier | Per endpoint | Confirmed at quote | Annual | |
| AMP4E-PRE-CL-LIC | Secure Endpoint Premier tier | Per endpoint | Confirmed at quote | Annual | |
| SEPVTCL-SEC-SUB | Secure Endpoint Private Cloud subscription (top line) | One per customer | Confirmed at quote | Annual | |
| SE-PVTCL | Secure Endpoint Private Cloud connector licences | Per endpoint | Confirmed at quote | Annual |
Part numbers from Cisco EOL13653, AMP and SVP AMP annuity migration (updated 7 January 2021) (opens in a new tab); Cisco EOL15691, Secure Endpoint Cloud subscription PID (updated 6 August 2026) (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.
Buying Secure Endpoint monthly: Secure MSP Center and the MSLA
There are three ways to buy Secure Endpoint:
| Route | How it is billed | Editions | Part numbers |
|---|---|---|---|
| Annual subscription | Annually or prepaid over the term | Advantage and Premier on the codes above; Essentials at quote | Listed above |
| Cisco's MSP programme (Secure MSP Center) | Monthly, per endpoint | Essentials and Advantage packages | Confirmed at quote |
| MSLA (Cisco's Managed Services License Agreement) | Monthly, on a usage or fixed-price basis | Ask us | Confirmed at quote |
Forever Systems supplies Secure Endpoint through Cisco's MSP programme, Secure MSP Center, per endpoint and billed monthly, with terms confirmed at quote. Cisco's MSP packages are Secure Endpoint Essentials and Advantage (opens in a new tab), invoiced on the same endpoint count they are licensed on, so the bill can follow your device count as it changes. Under the MSLA, Cisco's Secure Endpoint product terms (opens in a new tab) let the service provider choose a usage-based option or a fixed-price option.
Secure MSP Center and the MSLA are set up through Cisco's provider programmes rather than public part numbers, so we confirm the details in your quote. Monthly billing suits organisations whose device numbers move, or that want endpoint security to sit on the same monthly bill as their other services. An annual term suits a stable estate and a budget set once a year. We can quote both so you can compare.
Is Cisco Secure Endpoint licences the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Replaced Secure Endpoint part numbers
If an old quote, renewal notice or asset list shows one of these codes, this is what replaces it:
| Old part number | What it was | Last order date | Replaced by |
|---|---|---|---|
| AMP4E-CL-SUB | Cisco Secure Endpoint Cloud subscription | 25 September 2025 (EOL15691 (opens in a new tab)) | Public cloud: AMP4E-SEC-SUB with the tier code. Private cloud: SEPVTCL-SEC-SUB and SE-PVTCL |
| FP-AMP-1Y, -3Y and -5Y, bands S1 to S7, and FP-AMP-LIC= | Cisco Advanced Malware Protection on a 1, 3 or 5-year term, sold in node bands (S1 was 1 to 99 nodes), and its service licence | 23 January 2021 (EOL13653 (opens in a new tab)) | AMP4E-SEC-SUB with the Essentials tier code (confirmed at quote) |
| FP-AMP-ADV-1Y, -3Y and -5Y, bands S1 to S7, and FP-AMP-ADV-LIC= | The same terms, node bands and service licence for the Advantage tier | 23 January 2021 | AMP4E-SEC-SUB with AMP4E-ADV-CL-LIC |
| FP-AMP-PRE-1Y, -3Y and -5Y, bands S1 to S7, and FP-AMP-PRE-LIC= | The same terms, node bands and service licence for the Premier tier | 23 January 2021 | AMP4E-SEC-SUB with AMP4E-PRE-CL-LIC |
Subscriptions on AMP4E-CL-SUB keep their entitlements for their current term; Cisco lists 30 September 2030 as the last date of support. Renewals and additions move to the current codes, and Cisco says there are no changes to the underlying product or its features. These old codes cannot be ordered, so they have no basket buttons.
Secure Endpoint in Cisco's security suites
Secure Endpoint also comes inside Cisco's security suites, licensed per covered user rather than per endpoint:
- User Protection Suite: the Advantage tier includes Secure Endpoint Advantage, alongside Secure Access, Duo and Email Threat Defense
- Breach Protection Suite: the Essentials tier includes Secure Endpoint Advantage, and the Advantage and Premier tiers include Secure Endpoint Premier with Talos threat hunting, alongside Cisco XDR
Cisco's suite terms assume an average of two endpoints per covered user, so a suite can be the simpler buy when most people have a laptop and a phone. A suite makes sense when you want several Cisco products on one subscription; a standalone Secure Endpoint subscription suits organisations that only need endpoint protection. See Cisco security suites part numbers for the suite codes, or compare other endpoint protection products we supply.
How we help
Tell us how many devices need protecting, which operating systems they run, whether you use Cisco's public cloud or Private Cloud, and when any existing subscription ends. We match the edition to how much investigating your team does, compare the monthly MSP route with an annual term, and handle the order, renewals and added endpoints on one account. If you are replacing another antivirus product, our Cisco antivirus (opens in a new tab) guide compares the options, and if you would rather have the alerts watched for you, see managed Cisco Secure Endpoint (opens in a new tab).
Add the codes you need to your basket and send them with your enquiry, or simply Contact us and we will build the quote with you.
How Forever Systems supplies your software licences
Forever Systems supplies business software subscriptions to UK organisations from one account, with one invoice and a team who know the products.
- Help choosing the right edition: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from our engineers, not just a reseller account
- Consolidated billing and renewal reminders to help stop subscriptions lapsing unexpectedly
We can supply businesses, schools, charities and public sector organisations of all sizes.
Frequently asked questions
What is AMP4E-SEC-SUB?
It is the Cisco AMP for Endpoints XaaS Subscription, the top-line part number for buying or renewing Cisco Secure Endpoint in Cisco's public cloud. The edition, such as AMP4E-ADV-CL-LIC for Advantage or AMP4E-PRE-CL-LIC for Premier, is ordered under it for each endpoint.
What part number replaced AMP for Endpoints?
The term-based FP-AMP codes ended sale on 23 January 2021 and moved to AMP4E-SEC-SUB with a tier code. The cloud subscription code AMP4E-CL-SUB ended sale on 25 September 2025: public cloud customers use AMP4E-SEC-SUB with the tier code, and Private Cloud customers use SEPVTCL-SEC-SUB and SE-PVTCL.
Is Cisco Secure Endpoint licensed per user or per device?
Per endpoint: each laptop, desktop, server or mobile device running the connector needs a licence. The exception is Cisco's security suites, which are licensed per covered user and assume an average of two endpoints per user.
Can Cisco Secure Endpoint be billed monthly?
Yes. Forever Systems supplies Secure Endpoint through Cisco's MSP programme (Secure MSP Center), per endpoint, billed monthly, with terms confirmed at quote. The MSLA is another monthly route, on a usage or fixed-price basis.
Is there a part number for Secure Endpoint Essentials?
Essentials is ordered under AMP4E-SEC-SUB like the other tiers, and we confirm its tier code in your quote. Through Cisco's MSP programme, Essentials is one of the two monthly packages.
Still have a question about Cisco Secure Endpoint licences?
Ask us and a member of our team will get back to you.
More software and licensing guides
CiscoDuo, Umbrella, Secure Access, ISE, Secure Client, Secure Endpoint and more by part number.XDRXDR Essentials and Advantage codes through Cisco's MSP programme.Security suitesUser Protection and Breach Protection Suite codes in one place.Secure EmailGateway bundles and Email Threat Defense codes, plus replaced codes.