Licensing AnyConnect APEX and Umbrella (Roaming or DNS Essentials)

[schuetzm]

Hi,

I've go a question concerning licensing AnyConnect and Umbrella.

A customer wants to use AnyConnect Apex (for Posture) and in addition to that Umbrella DNS Essentials for his User.

Cisco Umbrella Roaming is included within AnyConnect Plus license and thereby in Apex too. This is described within Cisco AnyConnect Ordering Guide.

Question:

a)  We don't have to take care about extra licenses concerning Umbrella Roaming - correct? It's part of AnyConnect Apex.

b) What does "Umbrella Roaming services are licensed separately" mean (see picture)?

c) Does Umbrella DNS Essentials cover the part of "Umbrella Roaming" related to the AnyConnect note (question b)?

Thanks in advance.

Best regards

Matthias

[soup_dragon]

Interested in this as well as we have AnyConnect and Umbrella and licenses up for renewal soon. One thing about not licensing Umbrella directly which may or may not be an issue is if you want to take audit/log info into an external SIEM. My understanding is only Umbrella Enterprise license allows this. 

[Marvin Rhoads]

When you install the AnyConnect Umbrella Roaming Security module as part of your AnyConnect client deployment it requires you link it to your organization's ID with the orginfo.json file. That file is analogous to the VPN profile and it ties your clients into your organization's unique Umbrella instance in Cisco's cloud.

You can install the module as part of either AnyConnect Plus or Apex but it only works when used with a valid orginfo.json file that links up to a licensed Umbrella instance. All Umbrella licensing tiers are eligible for this integration.