● APP solution license: SL-ASR1-APP is a license bundle that includes FLASR1-AVC-RTU.
The Cisco ASR 1000 Series Router Application Visibility and Control RTU license (FLASR1-AVC-RTU(=)) enables you to configure NBAR and advanced application awareness on the Cisco ASR 1000 Series Routers or application reporting (visibility) and usage in application control in QoS policies.
● SEC solution license has two variants:
1) SL-ASR1-SEC is a license bundle that includes FLASR1-FW-RTU and FLASR1-IPSEC-RTU.
FLASR1-FW-RTU
==============
The part number for deployment of firewall on the other Cisco ASR 1000 chassis (part numbers ASR1002, ASR1004, ASR1006, and ASR1013) is FLASR1-FW-RTU. If you want to upgrade to firewall after the time of purchase of the router, for the Cisco ASR 1001, ASR 1001-X, ASR 1001-HX, ASR 1002-HX, or ASR 1002-X you must order either part number FLSASR1-FW= or L-FLSASR1-FW=. For the other Cisco ASR 1000 chassis (part numbers ASR1002, ASR1004, ASR1006, ASR 1006-X, ASR 1009-X, and ASR1013), you must order part number FLASR1-FW-RTU.
FLASR1-IPSEC-RTU
================
The Cisco ASR 1000 Series Router IPsec application requires an RTU license (FLASR1-IPSEC-RTU(=), and FLSA1-2X-IPS4G(=) on ASR 1002-X), which allows you to enable IPsec Triple Digital Encryption Standard (3DES) and Advanced Encryption Standard (AES), Dynamic Multipoint VPN (DMVPN), and Easy VPN.
2) SL-ASR1-SEC-HX is a license bundle specifically for ASR1001-HX and ASR1002-HX. SL-ASR1-SEC-HX includes FLSASR1-FW (refer FLASR1-FW-RTU above) and FLSA1-2HXIPS8G (8-Gbps crypto throughput base license) on ASR1002-HX; SL-ASR1-SEC-HX includes FLSASR1-FW and FLSA1-1HXIPS8G (8-Gbps crypto throughput base license) on ASR1001-HX. Notice that nHX in the license FLSA1-nHXIPS8G) indicates if the license is for ASR1001-HX or ASR1002-HX.
Reference -
https://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html
