topic Re: ISE/ASA licensing in Network Access Control

ISE/ASA licensing

Josh Morris — Thu, 05 Dec 2019 13:32:39 GMT

I am having a hard time figuring out the licensing required for ASA (5545-X) to ISE. On ISE< I have plenty available Apex licenses. On the ASA, I have plenty available Premium licenses. I am trying to get basic AAA between the ASA and ISE (NO posturing). But I am getting the following error in the ASA.

Session terminated, no AnyConnect Apex license available

But from what I see regarding ASA licensing, you don't need an Apex license to do basic ISE stuff, you only need it for posturing. What am I missing here?

Re: ISE/ASA licensing

Anurag Sharma — Thu, 05 Dec 2019 17:51:52 GMT

Hi @Josh Morris ,

I don't think this is the same "Apex" as ISE.

Can you please share the output of :

debug menu license 23
show version

Re: ISE/ASA licensing

hslai — Sun, 08 Dec 2019 02:55:28 GMT

As the message indicated, AnyConnect licenses are what you are missing.

Please check:

AnyConnect Licensing Frequently Asked Questions (FAQ) - Cisco

AnyConnect Ordering guide

Re: ISE/ASA licensing

Josh Morris — Mon, 09 Dec 2019 13:39:47 GMT

Yes, it turns out I need Anyconnect Apex licenses on the ASAs, as Premium no longer support this function. Luckily, I bought some a while back and forgot about them, so I will be applying them soon. Thanks.