General ASA 5510/ Anyconnect deployment question

[jrollins11]

Our client has an ASA 5510 with a Security Plus license and running ASA version 8.2(5) and ASDM version 6.4(5).  They want to deploy AnyConnect for users with Windows tablets with OS's ranging from Windows 10 down to Windows 7.  We are looking at the AnyConnect License Sku ASA-AC-E-5510 to buy for 250 users.  What will I need in order to have a successful deployment?  Which Anyconnect version will I need?  Is our ASA and ASDM current enough for this deployment or will I need to update that also?  The ASA is showing 256MB Flash and 1024MB total memory.  Do I have enough memory for this type of deployment?

Thanks, 

Jerod 

[austinmbailey1 · Accepted solution]

Jerod,

It looks like you can upgrade your ASA to version 9.1.6 and your ASDM version to 7.5.2.

The license you are looking at looks like the correct license.

As far as the anyconnect version, I believe they are on version 4.2.01022 currently, but updates are frequent to this software.

As far as the flash and memory, it will depend how many users you will have connecting to the ASA at the same time. How many users are you expecting?

Links:

 http://www.cisco.com/c/en/us/support/security/asa-5510-adaptive-security-appliance/model.html#~tab-downloads

https://software.cisco.com/download/release.html?mdfid=286281283&flowid=72322&softwareid=282364313&release=4.2.01022&relind=AVAILABLE&rellifecycle=&reltype=latest

Hope this helps!

-Austin

[jrollins11]

Thanks for the help Austin!  My guess is that users connected simultaneously will be less than 100.  I'm assuming from your question that it won't handle all 250 with the current memory installed?  I will reach out to our end user to find out how many they expect to be connected.

Thanks, 

Jerod Rollins

[austinmbailey1]

Jerod,

I'm afraid i'm not much help here, as in my enviorment I generally only have about 10 people connected at the same time. I utilize an ASA 5512x with 4gb of memory and I usually don't see any difference with it at idle versus having users connected. I believe someone with a bigger enviorment would be able to answer this question better for you.

[jrollins11]

Austin, 

Thanks again for your reply.  I think I am probably overshooting the amount of users anyway.  A recent conversation with the end user prompts me to believe it may be less than 50 even.  In that case we should be okay.  Another question comes to mind also about obtaining a SSL cert to install on the ASA.  What CA would I get the cert from to install on the ASA?

Thanks, 

Jerod Rollins

[austinmbailey1]

Jerod,

That is really up to you and your company. You can look around with vendors such as digicert, geotrust, or another trusted Certificate Authority and figure out which certificate authority will work best for you.

-Austin

[jrollins11]

Austin, 

Thanks for all your help!  You have certainly guided me in the right direction.

Thanks, 

Jerod Rollins