AnyConnect APEX License - expiration

[IT2018]

Hi,

We have a ASA 5525-X where we installed CISCO AnyConnect APEX license ( 1 year subscription).

Accordingly to CISCO support licenses are due to expire end of this month but by running a 'show ver' on the device it says that licenses are perpetual.

However we have purchased a new subscription and registered the PAK on the site. We've got activation key which is exactly the same as the previous one. Obviously if we try to enter the 'new' key the ASA says that the key is already installed.

Now the question is: how does the AnyConnect APEX license works in terms of expiration? Does anybody had similar issues ? Is correct to see "perpetual" on the 'sh ver' regarding VPN licenses ?

Thanks in advance,

Andrea

[Karsten Iwen]

The AnyConnect licensing is based on Trust-model. The ASA is not aware of the licensing and expiration as long as there was a license initially applied. After that it will just continue to work. But it's your responsibility to make sure you have a valid subscription as long as you use the VPN with the licensed features.

[IT2018]

Thank you,

that means that we just need to buy the new licenses and assign to the device. Don't need to apply any new key. Thanks,

Andrea

[Karsten Iwen · Accepted solution]

Yes, just document it internally to feel good that you are license-compliant and that you are prepared if there will be (theoretically) a license-audit.

[IT2018]

Thanks,

Andrea