Hi. If I understand your question correctly you need to share license with all devices.If so this guide will help you:http://www.cisco.com/en/US/services/ps10436/ps11169/ironport-sw-license-activation-key-process.pdfIf you haven't fullfiled your PAK ...

There is the following document on Cisco.com:http://www.cisco.com/image/gif/paws/111001/shun-block-config-ex.pdf"Connection blocks are not supported by security appliances. Security appliances only support host blocks with optional port and protocol ...

I have 2 remarks regarding configuration template (configuration part of the hub):crypto isakmp key cisco address 0.0.0.0 0.0.0.0 <- is not needed on hub since remote is authenticated using group passwordalso, I think, it's worth to add this command ...