FPR1140 anyconnect license

[VijayBhargavR8067]

I need to order the anyconnect license for ASA FPR1140 FW, however, bit confused on that. Can someone guide me on the same ? Its for 50-100 users ?

[Flavio Miranda]

Hi

 If VPN only you need this

L-AC-VPNO-100=

Secure Client VPN Only – Perpetual License/100 Concurrent Connections

CON-EMCU-ACVO100

https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html

[VijayBhargavR8067]

I did try while creating the BOM via CCW, but got the below error and hence was bit confused.

The item, L-AC-VPNO-100=, does not exist in this configuration. Search for another item to proceed. (C0208)

[Marvin Rhoads]

Most customers do not order VPNO perpetual licenses since the cost is quite a bit more all up front vs. purchasing L-AC-PLS-LIC= (Secure Client Advantage) on a term basis.

[VijayBhargavR8067]

When it comes to Purchasing Advantage or Premier licenses its based on unique user range . If i purchase a 100 -249 unique user range license, will it allow to 100 concurrent users or only first 100-249 users will be allowed to connect ?

[Marvin Rhoads]

Your purchase quantity is the total number of unique users you have. The license bands in the SKUs are just reflecting that the price per user goes down when you buy more licenses.

[VijayBhargavR8067]

Let's I have 248 concurrent always users all the time and there is 10 users who connect very rarely. At any given point of time, one among the 10 users can connect , right ?

[Marvin Rhoads]

Technically you should have a license for each unique user. It doesn't matter how many are logged in concurrently (except for the concurrent sessions limit of the hardware).

ASA and FTD do not currently enforce it via session limits, but it is incumbent upon your organization to be compliant with the End User License Agreement to have the correct number of licenses.

[VijayBhargavR8067]

Even i am not able to add the term-based license. I am ordering this for FPR 1140, which will be in ASA mode. Since, I am ordering for ASA code, will this make any difference ?

[Marvin Rhoads]

ASA or FTD image running on Firepower appliances both use Smart licenses. Same ordering SKUs.

Even ASA running on ASA hardware uses the same SKUs. Only difference is you install an activation key from a PAK vs. register a Smart license via token. The PAK just won't show when you are out of compliance with your term - that's why Cisco prefers Smart licenses: so they can better monetize the product.