10-14-2020 04:18 AM
Hi,
I've go a question concerning licensing AnyConnect and Umbrella.
A customer wants to use AnyConnect Apex (for Posture) and in addition to that Umbrella DNS Essentials for his User.
Cisco Umbrella Roaming is included within AnyConnect Plus license and thereby in Apex too. This is described within Cisco AnyConnect Ordering Guide.
Question:
a) We don't have to take care about extra licenses concerning Umbrella Roaming - correct? It's part of AnyConnect Apex.
b) What does "Umbrella Roaming services are licensed separately" mean (see picture)?
c) Does Umbrella DNS Essentials cover the part of "Umbrella Roaming" related to the AnyConnect note (question b)?
Thanks in advance.
Best regards
Matthias
10-14-2020 05:24 AM
Interested in this as well as we have AnyConnect and Umbrella and licenses up for renewal soon. One thing about not licensing Umbrella directly which may or may not be an issue is if you want to take audit/log info into an external SIEM. My understanding is only Umbrella Enterprise license allows this.
10-14-2020 06:36 AM
When you install the AnyConnect Umbrella Roaming Security module as part of your AnyConnect client deployment it requires you link it to your organization's ID with the orginfo.json file. That file is analogous to the VPN profile and it ties your clients into your organization's unique Umbrella instance in Cisco's cloud.
You can install the module as part of either AnyConnect Plus or Apex but it only works when used with a valid orginfo.json file that links up to a licensed Umbrella instance. All Umbrella licensing tiers are eligible for this integration.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide