This article is part of our Cisco Enterprise Agreement Negotiation Guide. Smart Licensing with True Forward is Cisco's default entitlement management model for most subscription-based products and is increasingly standard in Cisco Enterprise Agreements. If your organisation is on or moving to a Cisco EA, this guide is essential reading before any usage starts accumulating.
What Is Cisco Smart Licensing?
Cisco Smart Licensing is a cloud-based entitlement management system that replaces traditional product activation keys with a centralised licensing repository. Rather than activating each device with a one-time key, Smart Licensing registers products with Cisco's Smart Software Manager (CSSM) and continuously reports usage data back to Cisco's cloud infrastructure.
For enterprises, Smart Licensing provides genuine operational benefits: easier compliance tracking, faster deployment, and a unified view of entitlements across the portfolio. The complication arises with the True Forward component, which determines what happens when registered usage exceeds purchased entitlements.
How Smart Software Manager (CSSM) Works
CSSM is Cisco's cloud licensing portal where administrators manage Smart Accounts, Virtual Accounts, and entitlement pools. Products running Smart Licensing check in with CSSM periodically (typically every 30 days) to validate entitlements. Products in "Out of Compliance" status continue to function — a critical distinction from traditional licensing where non-compliance would trigger lockout.
This grace period model means enterprises can unknowingly accumulate licensing debt over months or years before a True Forward event forces reconciliation. Cisco's telemetry sees usage peaks that IT teams may not actively monitor.
What Is True Forward?
True Forward is Cisco's mechanism for billing customers for peak usage that exceeds their contracted entitlements. It is embedded in Cisco Enterprise Agreements and most Cisco subscription licensing frameworks. The mechanics are straightforward but the consequences are consistently underestimated.
01Usage Telemetry Collection
CSSM continuously collects usage data from registered products. This includes feature-level consumption, device counts, and active entitlement consumption across your Smart Account hierarchy.
02Peak Usage Identification
During the measurement window (typically quarterly or annually), CSSM identifies the highest single-day usage for each entitlement pool. This peak — not your average usage — becomes the billing baseline.
Stay Ahead of Vendors
Get Negotiation Intel in Your Inbox
Monthly briefings on vendor pricing changes, audit trends, and contract tactics. Unsubscribe any time.
No spam. No vendor affiliations. Buyer-side only.
03True Forward Calculation
If peak usage exceeds purchased entitlements at any point in the measurement window, Cisco calculates the overage delta. This delta is priced at your contract's unit price (not discounted) and billed as a True Forward charge.
04Ratchet Effect
True Forward charges permanently increase your baseline entitlement level for the next period. You cannot reduce back to your original contract level even if peak usage was temporary. Your cost floor moves up, never down.
05Renewal Anchoring
Your inflated post-True-Forward entitlement level becomes the baseline for your next EA renewal negotiation — meaning Cisco enters renewal discussions with your highest historical usage as the starting point for new pricing.
What Products Are Affected?
True Forward applies to virtually all Cisco subscription products registered under a Cisco Enterprise Agreement, including:
- Cisco DNA Software Advantage and Premier: Network automation and intelligence features for Catalyst and other platforms. DNA license consumption is tied to device count and feature tier.
- Cisco Umbrella: DNS-layer security priced per user/seat. Temporary contractor peaks or onboarding waves can trigger True Forward events.
- Cisco Duo: Identity verification priced per user. Similar risk to Umbrella during workforce expansions.
- Cisco Webex Calling and Collaboration: Per-user subscription. M&A integrations are a frequent source of unplanned True Forward events.
- Cisco Meraki: Per-device licensing. Network expansions mid-term commonly trigger true-ups.
- Cisco ThousandEyes: Consumption-based monitoring platform with True Forward exposure on endpoint agent deployments.
Common True Forward Triggers in Enterprise Environments
Based on our advisory work on Cisco contracts, the most common sources of unintended True Forward events are:
- Mergers and acquisitions: Absorbing an acquired entity's users or devices mid-contract without purchasing additional entitlements is the single largest True Forward trigger.
- Disaster recovery and test environment registration: DR systems or lab environments registered in production Smart Accounts count toward entitlement consumption.
- Contractor and temporary user spikes: Peak contractor populations during project phases driving Duo or Webex usage above contracted levels.
- Network refresh cycles: New device deployments temporarily running in parallel with decommissioned equipment inflate device counts during transition windows.
- Software-defined networking expansion: Cisco DNA Center policy deployments expanding feature tier consumption across devices already licensed at a lower tier.
How to Negotiate True Forward Protections
The time to negotiate True Forward protections is before signing a Cisco EA — not after a True Forward event has already occurred. The following clauses are achievable in Cisco enterprise negotiations:
Overage Buffer
Negotiate a 10–15% overage buffer above your contracted entitlements before True Forward applies. Cisco will resist this but will often accept 5–10% buffers for customers with strong volume commitments. This buffer absorbs minor usage peaks without triggering permanent cost increases.
True Forward Measurement Window
Push for annual rather than quarterly True Forward measurement windows. Annual measurement gives you more time to identify overage trends and take corrective action (decommissioning unused devices, reclaiming inactive user licenses) before a True Forward event is locked in.
M&A Carve-Out Period
Request a 90–180 day grace period following any acquisition close date during which newly integrated entities are exempt from True Forward measurement. This is a reasonable ask that Cisco has accepted in multiple engagements.
Downward Flex Provision
While Cisco's default model is ratchet-only, some enterprise agreements have included limited downward flex provisions (typically 10–15% reduction at renewal) when the customer can demonstrate a documented reduction in user count or device footprint due to divestiture or workforce restructuring.
True Forward Notification Obligation
Negotiate a contractual obligation for Cisco to notify you when entitlement consumption reaches 80% and 95% of contracted levels. This early warning provision allows proactive action rather than reactive billing disputes. Our Cisco EA negotiation guide covers the full framework for structuring these protections.
Smart Licensing vs. Traditional Cisco Licensing
Enterprises that migrated from traditional PAK-based Cisco licensing to Smart Licensing typically experience better compliance visibility but higher actual costs in the first 2–3 years. The visibility that Smart Licensing provides often reveals previously untracked usage that was technically non-compliant under the old model — and Cisco's account teams are trained to use this discovery process to drive True Forward charges and EA upsells.
If your organisation is in the process of migrating to Smart Licensing, conduct a full entitlement audit before connecting any production systems to CSSM. Understanding your actual usage baseline before Cisco can see it is critical negotiating leverage. See our Cisco advisory service and our IT Contract: 50 Clauses That Matter white paper for the specific contract language to request.
Cisco Enterprise Licensing Cluster Pillar: Cisco EA Negotiation Guide Cisco EA vs A-La-Carte Cisco DNA Licensing Cisco Webex Licensing Cisco Security Licensing Cisco Meraki Licensing Smart Licensing & True Forward