ASA APEX licensing questions

[carlhuffman]

I recently upgraded my ASA license to APEX and I've noticed that if I run sho activation-key detail the ASA is saying that the license is security plus not APEX as expected. I'm not sure if the ASA should be reflecting the new information or if that's just how it shows up so I figured I would ask here.

My second question has to do with host scan. One of the main reason we upgraded the license to APEX was for the host scan feature. The issue is that I can't seem to find a good way to download the image. I found this guide that points you to this dead link. After a lot of digging this has been my best lead, but it seems to be a dead end. I was hoping someone could maybe point me in the right direction.

Thanks for taking the time to look at my issue.

[Rahul Govindan · Accepted solution]

The Apex license translates to AnyConnect Premium Peers and a few other features on the ASA. The Apex license is not represented in a different way from the older license module. You can sort of say:

Apex = Anyconnect Premium + Anyconnect for mobile + Anyconnect for Cisco VPN phone + Advanced endpoint assessment

For example with Apex, you should see the following enabled:

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 100 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 250 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 250 perpetual
Total VPN Peers : 250 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
IPS Module : Enabled perpetual
Cluster : Enabled perpetual
Cluster Members : 2 perpetual

The Hostscan should be under the Anyconnect downloads. The link to download the latest version it is here:

https://software.cisco.com/download/release.html?mdfid=286281283&softwareid=282364313&os=&release=4.4.03034&relind=AVAILABLE&rellifecycle=&reltype=latest&i=!pp

[carlhuffman]

Thanks for clearing that up Rahul! That's exactly what I needed.