AnyConnect with ASAv RA-VPN PAG license

[tochen]

I'm trying out ASAv RA-VPN on AWS https://aws.amazon.com/solutions/partners/cisco-asav-ravpn

How can I get a license for downloading the software packages to complete the RA-VPN configuration to actual try it? Using the serial number from the deployed instance doesn't work for getting a demo / eval license.

[balaji.bandi]

how about this :

https://aws.amazon.com/marketplace/pp/prodview-k3dpkteh6bgzi

[tochen]

Hi BB,

Thanks for the input. That's actually what I'm using to deploy a running instance. However, I cannot find a way to download the AnyConnect packages from the Cisco software download center to complete the RA-VPN configuration. Maybe I missed something?

[balaji.bandi]

OP post information was talking about License, now you mentioned any connect package download ? what is the issue? download or License?

ASAv on AWS is just AWS instance for ASAv

For any connect you need to buy a License that is a different product.

https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html

[tochen]

Hi BB,

As the title suggests, I'm asking about the license for downloading AnyConnect Windows / MacOS etc. packages in order to fully configure ASAv RA-VPN as uploading a package is a required step.

On https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html, Section 6.2 seems to suggest you can obtain evaluation licenses for that. However, following the instructions with the serial number from the ASAv instance "show version" does not work.

[balaji.bandi]

when we mix title and subject that confused bit - any way - you might have tried. I have ASAv in lab below command works for me

get SR Number # show version | grep Serial

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asav/quick-start/asav-quick/asav-config.html

[Rob Ingram · Accepted solution]

@tochen the ASAv comes with 2 "free" VPN connections, your problem is the ASAv needs the anyconnect headend deployment package uploading before you can establish a connection. The AWS documentation states the ASAv does not have the packages deployed with them. So you either need entitlement on software.cisco.com in order to download the package(s) or perhaps contact AWS support and ask them to provide.

[tochen]

I was hoping the PAYG model would include everything you need to get started and avoid all the hassle of going through the procurement etc. But seems like there isn't a way around that.

Thanks all for the input.

[Marvin Rhoads · Accepted solution]

I believe ASAv uses smart licenses exclusively and does not include the two "free" licenses that hardware ASAs offered.

So even with the software downloaded it would still be unlicensed. As noted in the thread already, downloading the headend package requires entitlement in your cisco.com account. If your organization does not have any entitlement then you can work with your reseller for a customer POV license and to obtain the software legitimately.

Since Cisco targets this system to the enterprise, they don't really provide a method for just anyone to download it at will.

[Rob Ingram]

@tochen the AWS deployment guide of the solution confirms there are 2 anyconnect licenses, so you could still evaluate the solution....once you get the anyconnect deployment package.

https://aws-quickstart.s3.amazonaws.com/quickstart-cisco-asav-ravpn/doc/cisco-asav-ravpn-on-the-aws-cloud.pdf