ASA 5510 Failover License Requirements

[Thomas Reiling]

We are ordering an ASA 5510 with the 25-user SSL VPN license.  We've now decided to configure failover and order two ASA 5510's.

Can someone tell me the exact license requirements needed for two ASA 5510's with the 25-user SSL VPN configured for failover?

Thank you,

Thomas

[Collin Clark]

Thomas-

Do you know what Anyconnect feature license you need (Essentials/Premium)? Here's a link that describes your different options.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-527494.html

What you know which one you want, post it and we'll go from there.

[Thomas Reiling]

Collin,

I'm thinking we need the following to meet our aforementioned requirements:

(Quanity 2) ASA5510-BUN-K9

(Quantity 1) ASA-SSL-25

(Quantity 2) ASA5510-SEC-PL

Will that do it?

Thanks,

Thomas

P.S. - Are any of the listed licenses above refered to as Anyconnect?

[Collin Clark]

Thomas-

(Quanity 2) ASA5510-BUN-K9   ---! This is the physical hardware

(Quantity 1) ASA-SSL-25   ---! This is the Anyconnect licenses

(Quantity 2) ASA5510-SEC-PL   ---! This is the Security+ license upgrade for failover (and a couple of other things)

The only problem I see is that you havel qty 1 for the Anyconnect licenses. Each firewall must have the license. All items above should have qty 2.

Hope it helps.

[Thomas Reiling]

Thanks for the quick reply, Collin.

I'm pretty sure when you have the security plus option on these ASA's you can use the same 25 user license if there is a failover.  Please correct me if I'm wrong.

Thanks again,

Thomas

[Collin Clark]

Thomas,

I just checked with another engineer and he agrees that each firewall needs the license. By all means ask the SE from the VAR you are purchasing from. Let me me know if you hear different. Thanks.

[Thomas Reiling]

Collin,

I checked with him and he said we'd only need the single license because of the security plus license.  Not sure what to do...

Thank you,

Thomas

[Collin Clark]

Wait one. I'll reach out to Cisco and see what they say.

[Collin Clark · Accepted solution]

"Beginning with the Cisco ASA Software Release 8.3, duplicate licenses are no longer required for Active/Standby configurations. License options will be combined together."

In other words, run 8.3 and you won't need to spend the extra money on licenses. If you need/want to run 8.2 or < then you will need qty 2.

[Thomas Reiling]

Thanks a lot, Collin.  I appreciate your time.

Thomas