topic Re: AnyConnect with ASAv RA-VPN PAG license in Network Security

AnyConnect with ASAv RA-VPN PAG license

tochen — Sat, 17 Dec 2022 19:06:47 GMT

I'm trying out ASAv RA-VPN on AWS https://aws.amazon.com/solutions/partners/cisco-asav-ravpn

How can I get a license for downloading the software packages to complete the RA-VPN configuration to actual try it? Using the serial number from the deployed instance doesn't work for getting a demo / eval license.

Re: AnyConnect with ASAv RA-VPN PAG license

balaji.bandi — Sat, 17 Dec 2022 20:48:43 GMT

how about this :

https://aws.amazon.com/marketplace/pp/prodview-k3dpkteh6bgzi

Re: AnyConnect with ASAv RA-VPN PAG license

tochen — Sat, 17 Dec 2022 21:03:16 GMT

Hi BB,

Thanks for the input. That's actually what I'm using to deploy a running instance. However, I cannot find a way to download the AnyConnect packages from the Cisco software download center to complete the RA-VPN configuration. Maybe I missed something?

Re: AnyConnect with ASAv RA-VPN PAG license

balaji.bandi — Sat, 17 Dec 2022 21:42:15 GMT

OP post information was talking about License, now you mentioned any connect package download ? what is the issue? download or License?

ASAv on AWS is just AWS instance for ASAv

For any connect you need to buy a License that is a different product.

https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html

Re: AnyConnect with ASAv RA-VPN PAG license

tochen — Sun, 18 Dec 2022 03:14:20 GMT

Hi BB,

As the title suggests, I'm asking about the license for downloading AnyConnect Windows / MacOS etc. packages in order to fully configure ASAv RA-VPN as uploading a package is a required step.

On https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html, Section 6.2 seems to suggest you can obtain evaluation licenses for that. However, following the instructions with the serial number from the ASAv instance "show version" does not work.

Re: AnyConnect with ASAv RA-VPN PAG license

balaji.bandi — Sun, 18 Dec 2022 10:57:54 GMT

when we mix title and subject that confused bit - any way - you might have tried. I have ASAv in lab below command works for me

get SR Number # show version | grep Serial

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asav/quick-start/asav-quick/asav-config.html

Re: AnyConnect with ASAv RA-VPN PAG license

Rob Ingram — Sun, 18 Dec 2022 11:08:49 GMT

@tochen the ASAv comes with 2 "free" VPN connections, your problem is the ASAv needs the anyconnect headend deployment package uploading before you can establish a connection. The AWS documentation states the ASAv does not have the packages deployed with them. So you either need entitlement on software.cisco.com in order to download the package(s) or perhaps contact AWS support and ask them to provide.

Re: AnyConnect with ASAv RA-VPN PAG license

Marvin Rhoads — Sun, 18 Dec 2022 12:08:04 GMT

I believe ASAv uses smart licenses exclusively and does not include the two "free" licenses that hardware ASAs offered.

So even with the software downloaded it would still be unlicensed. As noted in the thread already, downloading the headend package requires entitlement in your cisco.com account. If your organization does not have any entitlement then you can work with your reseller for a customer POV license and to obtain the software legitimately.

Since Cisco targets this system to the enterprise, they don't really provide a method for just anyone to download it at will.

Re: AnyConnect with ASAv RA-VPN PAG license

tochen — Sun, 18 Dec 2022 12:38:56 GMT

I was hoping the PAYG model would include everything you need to get started and avoid all the hassle of going through the procurement etc. But seems like there isn't a way around that.

Thanks all for the input.

Re: AnyConnect with ASAv RA-VPN PAG license

Rob Ingram — Sun, 18 Dec 2022 12:44:35 GMT

@tochen the AWS deployment guide of the solution confirms there are 2 anyconnect licenses, so you could still evaluate the solution....once you get the anyconnect deployment package.

https://aws-quickstart.s3.amazonaws.com/quickstart-cisco-asav-ravpn/doc/cisco-asav-ravpn-on-the-aws-cloud.pdf