cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
962
Views
5
Helpful
3
Replies

Licensing Firepower ASA software Anyconnect APEX VPN HA

If you choose to deploy A Firepower appliance with ASA software in HA, do you require two sets of subscription licenses for Anyconnect VPN subscription licences (Plus or apex) 

How does it apply to Active/active and active /Standby deployments?

 

1 Accepted Solution

Accepted Solutions

AnyConnect Apex is not available as a perpetual license - only 1, 3 or 5 years..

 

AnyConnect Plus is available as perpetual in addition to term-based.

 

My earlier reply holds true for AnyConnect Plus perpetual licenses.

 

If you purchase VPN Only licenses (which are not term-based and are perpetual) then those licenses are restricted to an individual appliance. If you have an HA pair the VPN only license can be shared from the Primary member to its mate.

View solution in original post

3 Replies 3

Marvin Rhoads
Hall of Fame
Hall of Fame

Anyconnect 4.x (and later) Plus and Apex are licensed per unique user. You can redeem the PAKs on multiple devices. In the case of an ASA HA pair (either Active-Standby or Active-Active or even in a cluster or multiple ASAs) you only need apply a single AnyConnect activation key. You have the option of applying them on all the appliances but the HA/cluster will operate either way.

 

The only corner case consideration is if you had only licensed the Primary ASA and the HA was broken and the Standby unit was active for >30 days without the licensed Primary having rejoined, you would then need an AnyConnect license on the Standby-Active unit.

Thank you Marvin,

just to be clear,

I'm deploying an ASA 2130 in HA with ASA code. The activation key is true for either the Subscription APEX licenses and/or the perpetual? 

 
 

AnyConnect Apex is not available as a perpetual license - only 1, 3 or 5 years..

 

AnyConnect Plus is available as perpetual in addition to term-based.

 

My earlier reply holds true for AnyConnect Plus perpetual licenses.

 

If you purchase VPN Only licenses (which are not term-based and are perpetual) then those licenses are restricted to an individual appliance. If you have an HA pair the VPN only license can be shared from the Primary member to its mate.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: