ASA SSL Licensing query

johnson-richard · ‎01-23-2007

Hi,

We are planning on putting Active/Standby pairs of ASA CSC bundles at three of our sites. We would also like to use these pairs as SSL head end devices.

The question is whether we really need to purchase two sets of SSL licenses (and for that matter CSC user licenses) when only one device will ever be active in the proposed scenario?

I would be very grateful if anyone can clear this up as I have not been able to find anything definitive on Cisco's web or through their distribution channels.

Thanks

Richards

sachinraja · ‎01-23-2007

Hello Johnson,

YESSSS.. you will have to have the SSL licenses for both the boxes.. only then SSL VPN will work fine, when failing over to the standby box.. the licenses does not get copied on a failover scenario...

Hope this helps.. all the best.. rate replies if found useful..

Raj

johnson-richard · ‎01-24-2007

Hi Raj,

Thanks for the response,i was worried that this was the case. Are you totally sure, have you deployed a similar scenario?

We're looking at the 500 user license (list at $30k) so it is harsh that we need to purchase the license twice. I'm sure Cisco will rectity this over time though.

Thanks