ASA 5540 VPN Premium

[aryarahul]

Hi,

I have a ASA 5540 VPN Premium with 2 Clientless licenses

How many anycoonect users can i accomadate with concurrent sessions ??

Thanks

[Karsten Iwen]

If you don't have any additional license you can connect two concurent AnyConnect-Clients. If you install the quite inexpensive "AnyConnect Essetials" license, then a 5540 can terminate up to 2500 AnyConnect (SSL) client sessions.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[aryarahul]

Thanks for the reply..

My license summary in ASA states that its VPN PREMIUM , i m not sure whether anyconnect essesntials is there or not but it says vpn client sessions as 2500 in the summary

[aryarahul]

Also do i have to purchase a separate license key for using Anyconnect essesntials ??

what if i use Cisco VPN Client instead of Cisco Anyconnect ? will it still be requiring any Essential License ??

[Jouni Forss]

By default the original ASA models client limits mean the IPsec VPN Client connections. So by default you shouldnt normally reach a limit with regards to using the Cisco VPN Client. Then again its getting pretty old and isnt supported on the newer operating systems.

The SSL based VPN clients are usually limited to the default 2 unless you get AnyConnect Essentials atleast.

- Jouni

[Karsten Iwen]

The "Premium" label is from the old days and has no meaning nowadays anymore. Of course you can keep using the old Cisco VPN-client or a replacement client for example the one from Shrew software: https://www.shrew.net/software

With that the session limit is 5000 concurent sessions. The typical way would be to buy the AnyConnect Essentials license which is about $250 for the 5540. With that you can migrate to the more modern AnyConnect client which is the only one that is in active development by Cisco. And it's worth it as AnyConnect is much less problematic then the legacy client especially if you also use 3G connections. And it supports more features on actual operating systems.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni