Ordering ASA5505 Security Plus Licence

[pnanayakkara]

We have a base licence with 25 ssl user licences. we need to increase the VPN peers to 25. hHw can we do it, and what would be the product number? Thanks for your help.

current FW has following

Licensed features for this platform:

Maximum Physical Interfaces : 8

VLANs : 3, DMZ Restricted

Inside Hosts : 50

Failover : Disabled

VPN-DES : Enabled

VPN-3DES-AES : Enabled

SSL VPN Peers : 25

Total VPN Peers : 10

Dual ISPs : Disabled

VLAN Trunk Ports : 0

[pnanayakkara]

Hi,

I managed to obtain the key today, but when I enabled the licence, I got..

Licensed features for this platform:

Maximum Physical Interfaces : 8

VLANs : 20, DMZ Unrestricted

Inside Hosts : 50

Failover : Active/Standby

VPN-DES : Enabled

VPN-3DES-AES : Enabled

SSL VPN Peers : 25

Total VPN Peers : 25

I wanted to run 25 SSL VPN and 25 IPSEC VPNs. It seems only total of 25 VPN (SSL and IPSEC) sessions are supported.

I tried to get some clarity on this but I couldn't find it on the web. Could you please check it for me?

Thanks very much in advance.

Cheers,

Pubudu.

[nsn-amagruder]

Yes 25 concurrent IPSec and SSL VPN combined is the limit on the 5505.  If you need more the 5510 would be needed.  i.e 10 SSL and 15 IPSec VPN = 25 concurrent sessions.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd80402e3f.html

¹Devices include a license for two SSL VPN users for evaluation and remote management purposes. The total concurrent IPsec and SSL (clientless and tunnel-based) VPN sessions may not exceed the maximum concurrent IPsec session count shown in the chart. The SSL VPN session number may also not exceed the number of licensed sessions on the device.

[pnanayakkara]

Thanks Very much for your prompt response.

Also, if we were to buy ASA 5510, can we transfer existing 25 SSL licences to the new firewall?

Cheers,

Pubudu.

[nsn-amagruder]

No, each one supports more sessions, has a greater price and thus different part number. 

L-ASA-AC-E-55xx (replace xx with model number)

[pnanayakkara]

Hi ,

We have a 25 SSL licences for Cisco ASA 5505. Could we transfer the ASA 5505 licence to ASA5510? We are upgrading the firewall.

When I have a look at SSL licences part number they all comes with "ASA5500-ssl-". That mean we should be able use it on any ASA5500. Could you please confirm?

Cheers,

Pubudu.