Licenses
The Secure Firewall migration tool does not require any additional license to be accessed from Security Cloud Control.
However, you need to have a Security Cloud Control base subscription and licenses for the Firewall Threat Defense features you want to migrate.