topic Re: I had a question on licensing for the Firepower 1010 in Network Security

I had a question on licensing for the Firepower 1010

Boleytech — Mon, 14 Feb 2022 19:16:48 GMT

Does the base license give me the ability to create site-to-site ipSec connections? Or do I need the RA VPN license to enable that feature?

Re: I had a question on licensing for the Firepower 1010

Aref Alsouqi — Mon, 14 Feb 2022 19:28:49 GMT

The site to site VPN is supported by default on the FTD without any specific license requirement. You would need the RAVPN licenses only if you are planning to use AnyConnect.

Re: I had a question on licensing for the Firepower 1010

Sheraz.Salim — Mon, 14 Feb 2022 20:17:03 GMT

AnyConnect PLUS

* VPN functionality for PC and mobile platforms, including per-app VPN on mobile platforms.
* Basic endpoint context collection (Note: NOT full ISE context support).
* IEEE 802.1X Windows supplicant.
* Cisco Cloud Web Security agent for Windows & Mac OS X platforms.
* Cisco Web Security Appliance support.
* FIPS compliance.

AnyConnect APEX

* Everything that’s included in AnyConnect Plus.
* Clientless (browser-based) VPN termination on the Cisco ASA.
* VPN Compliance/Posture agent in conjunction with the Cisco ASA.
* Unified Compliance/Posture agent in conjunction with the Cisco ISE 1.3 or later.
* Next Generation Encryption/Suite B.

Below is the cisco link for anyconnect FAQ

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200191-AnyConnect-Licensing-Frequently-Asked-Qu.html

The RA-VPN licenses require AnyConnect (Plus or Apex) subscription. However, those are only for RA-VPN. If you want to configure Site-to-Site VPN (IPSec) you don't need to purchase any additional licenses.

similar discussion happened in past here and

here for you firewall get onboard with cisco smart licenicing and get the strong encryption enable to use for VPN-TUNNEL with strong encryption. otherwise it will be 3Des.

Are you going to manage this Firewall from FMC or you using this firewall standalone?

Re: I had a question on licensing for the Firepower 1010

Tim Tran — Sun, 15 Oct 2023 02:35:48 GMT

Thank for your comment @Aref Do you know how to by a license for RA VPN for Firepower FTD 1010 running ASA version 16.xx. Thanks