Software icense allows the end user to run stateful firewall on one NPU per MS-MIC, MS-DPC or MS-MPC in the MX-series routers.