small lab scale licensing for AnyConnect RA VPN

[maurice.audet1]

I am using a small-scale learning/test home and lab to learn/practice in support of my "paid (contract) work" for Government of Canada clients.  I already purchased and licensed a FPR-1010 Secure Firewall and  Catalyst-1000 Access switch, with associated support subscriptions.  

I am trying to I am trying to build a test topology that will include 1 x Remote Access VPN (AnyConnect/Secure Mobility Client on both Linux and Windows clients featuring IKEv2/IPsec with strong encryption and certificate authentication).

My Cisco partner/vendor is consulting with Cisco about options, but as most in this community will know, the smallest package for Cisco AnyConnect is the "Advantage" license / support package, and there is a minimum order of 25 concurrent connections to a single headend.  In my case, the headend will be the FPR-1010 running ASA 9.23 software.  are there other options?

[Marvin Rhoads]

You have to purchase the minimum number of licenses (25 as you noted). Partners can request a customer lab licenses but it's only good for 30 days.

Note if you intend to test SAML and/or Suite B strong encryption you will need Apex licenses. Advantage (formerly known as Plus) and Premier (formerly known as Apex) are the current primary licenses types. The SKUs still reflect the old names.

The list price (in US$) for qty 25 each of the licenses are:

L-AC-PLS-LIC= $161.25
L-AC-APX-LIC= $387.25

So you can probably get the Advantage licenses for around US$100 or less after discounts.

[lara45dim]

In your case, where you're using a Cisco FPR-1010 with ASA 9.23 in a small-scale lab to support your Government of Canada contract work, the standard Cisco licensing model for AnyConnect can indeed feel excessive, particularly with the 25-user minimum under the Advantage tier. Unfortunately, Cisco does not officially offer smaller license packs for AnyConnect outside of what’s listed in their tiered bundles, and the perpetual licenses they once offered have largely been replaced by subscription-based Smart Licensing. That said, a few alternatives may be worth exploring. First, some Cisco partners can sometimes facilitate demo or NFR (Not For Resale) licenses through special programs—especially for lab use or partner testing—so your partner should inquire specifically about lab/demo entitlements or partner licensing options.