topic AnyConnect APEX License - expiration in Network Security

AnyConnect APEX License - expiration

IT2018 — Fri, 21 Feb 2020 15:48:17 GMT

Hi,

We have a ASA 5525-X where we installed CISCO AnyConnect APEX license ( 1 year subscription).

Accordingly to CISCO support licenses are due to expire end of this month but by running a 'show ver' on the device it says that licenses are perpetual.

However we have purchased a new subscription and registered the PAK on the site. We've got activation key which is exactly the same as the previous one. Obviously if we try to enter the 'new' key the ASA says that the key is already installed.

Now the question is: how does the AnyConnect APEX license works in terms of expiration? Does anybody had similar issues ? Is correct to see "perpetual" on the 'sh ver' regarding VPN licenses ?

Thanks in advance,

Andrea

Re: AnyConnect APEX License - expiration

Karsten Iwen — Thu, 24 May 2018 11:13:38 GMT

The AnyConnect licensing is based on Trust-model. The ASA is not aware of the licensing and expiration as long as there was a license initially applied. After that it will just continue to work. But it's your responsibility to make sure you have a valid subscription as long as you use the VPN with the licensed features.

Re: AnyConnect APEX License - expiration

IT2018 — Thu, 24 May 2018 11:33:41 GMT

Thank you,

that means that we just need to buy the new licenses and assign to the device. Don't need to apply any new key. Thanks,

Andrea

Re: AnyConnect APEX License - expiration

Karsten Iwen — Thu, 24 May 2018 11:52:41 GMT

Yes, just document it internally to feel good that you are license-compliant and that you are prepared if there will be (theoretically) a license-audit.

Re: AnyConnect APEX License - expiration

IT2018 — Thu, 24 May 2018 12:02:26 GMT

Thanks,

Andrea