topic Note that if you purchased a in Network Security

Anyconnect user license upgrade on Cisco ASA 5520 8.2.5 failover pair

Lovleen Arora — Tue, 12 Mar 2019 09:07:48 GMT

Hi,

Thanks in advance.

I need to know how do i apply this new activation key?

same activation key to both ASAs?

first apply it to Cisco ASA Secondary standby and reload it.

and then failover to secondary and make it active.

and then apply the same activation-key to primary standby and reload it.

Please confirm?

Many thanks

Lovleen

An activation key is only

Philip D'Ath — Mon, 27 Mar 2017 00:57:29 GMT

An activation key is only issued to a specific device with a specific serial number. The same key can not be applied to two different ASA's, clustered or otherwise.

I typically buy a licence for each ASA, to keep them matching. However in this case, as long as your software is not too old, applying the licence on one will allow both members of the failover cluster to see and use it.

8.2(5) is what I would call bordering on "ancient". If you have a Cisco maintenance contract, like SmartNet, you should upgrading to something like asa917-15-k8.bin.

Also note the 5520 is going "fully" end of support next year. If you don't currently have a Cisco maintenance contract then you wont be allowed to buy one now.
http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/eol_C51-727279.html

You should consider upgrading to something like an ASA 5516-X.
http://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html

You could also consider the newer Firepower 2100 series.
http://www.cisco.com/c/en/us/products/security/firepower-2100-series/index.html

Note that if you purchased a

Marvin Rhoads — Mon, 27 Mar 2017 04:22:02 GMT

Note that if you purchased a new AnyConnect 4.x license the PAK can be redeemed for multiple appliances. That's because the new licensing scheme is per unique user vs. per ASA. You will still need a unique activation key per appliance

The exception is the VPN-O license type. Those are issued for one appliance only.

We have bought a L-AC-PLS-1Y

Lovleen Arora — Mon, 27 Mar 2017 20:06:00 GMT

We have bought a L-AC-PLS-1Y-S3 license.

i need to know how do i apply it to the Cisco ASA 5520 HA pair (active/standby). thanks

Just go to cisco.com/go

Rahul Govindan — Mon, 27 Mar 2017 22:29:06 GMT

Just go to cisco.com/go/license and redeem your PAK to get your activation key. Once you receive the activation key, apply it to the active (usually primary) ASA using the CLI command "activation-key xxxx-xxxx". You can also apply the activation key using ASDM. You do not need to apply it to both ASA's in your active/standby pair.