asa license question

[willem]

I bought a mobile license for my ASA 5505 and requested a license key thru the license portal. In my current license VPN-3DES-AES is enabled, but in my new license it says it is disabled. Does that mean I will lose my license for 3DES-AES when I install my new activation key. I have attached current and new below.

Licensed features for this platform:

Maximum Physical Interfaces       : 8              perpetual

VLANs                             : 3              DMZ Restricted

Dual ISPs                         : Disabled       perpetual

VLAN Trunk Ports                  : 0              perpetual

Inside Hosts                      : 50             perpetual

Failover                          : Disabled       perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 10             perpetual

Total VPN Peers                   : 25             perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

This platform has a Base license.

------------------ This is the result of my mobile upgrade. What will happen, will it disable 3DES-AES or as it is allready enabled will it be left alone.

Failover                        : Disabled

Encryption-DES                  : Enabled

Encryption-3DES-AES             : Disabled

Security Contexts               : Default

GTP/GPRS                        : Disabled

AnyConnect Premium Peers        : Default

Other VPN Peers                 : Default

Advanced Endpoint Assessment    : Disabled

AnyConnect for Mobile           : Enabled

AnyConnect for Cisco VPN Phone  : Disabled

Shared License                  : Disabled

UC Phone Proxy Sessions         : Default

Total UC Proxy Sessions         : Default

AnyConnect Essentials           : Disabled

Botnet Traffic Filter           : Disabled

Intercompany Media Engine       : Disabled

Thanks in advance, Willem.

[varrao · Accepted solution]

Hi Will,

Yes, the license that you got has 3DES disabled, but you can generate the 3DES license for free from the cisco site:

https://tools.cisco.com/SWIFT/LicensingUI/loadDemoLicensee?FormId=139

Hope that helps.

Thanks,
Varun Rao
Security Team,
Cisco TAC

[hobbe · Accepted solution]

Hi

Send an E-mail to Licensing@cisco.com to ask them for a correct license.

They will fix that for you.

And save all the activation keys in a safe place so that you can restore them incase of a problem with the flash or an upgrade later.

I type them out and tape the keys to the outside of the ASA.

Good luck

HTH

[willem]

The email to licensing@cisco.com did the trick, license was amended and it works perfectly now. Thanks !