I believe you're going to need to use another form of authentication.  According to what you've said it sounds like RADIUS will do it. ... View more

Ping traffic is not TCP so your pings won't be blocked.  You either need to block all or block ICMP (which is ping traffic).  See below.  If you wanted to block both ways, you would need to add another rule with source and destination flip flopped.   ... View more

You should be able to apply the licenses to new hardware, is that not something you're looking to do? ... View more