cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Cisco Community will be experiencing a downtime on 17/Dec/18 02:20 AM GMT-0600 / 17-Dec 12 AM PST for 15 mins. Sorry for the inconvenience.

105
Views
0
Helpful
3
Replies

Licensing Firepower ASA software Anyconnect APEX VPN HA

If you choose to deploy A Firepower appliance with ASA software in HA, do you require two sets of subscription licenses for Anyconnect VPN subscription licences (Plus or apex) 

How does it apply to Active/active and active /Standby deployments?

 

3 REPLIES
Hall of Fame Master

Re: Licensing Firepower ASA software Anyconnect APEX VPN HA

Anyconnect 4.x (and later) Plus and Apex are licensed per unique user. You can redeem the PAKs on multiple devices. In the case of an ASA HA pair (either Active-Standby or Active-Active or even in a cluster or multiple ASAs) you only need apply a single AnyConnect activation key. You have the option of applying them on all the appliances but the HA/cluster will operate either way.

 

The only corner case consideration is if you had only licensed the Primary ASA and the HA was broken and the Standby unit was active for >30 days without the licensed Primary having rejoined, you would then need an AnyConnect license on the Standby-Active unit.

Re: Licensing Firepower ASA software Anyconnect APEX VPN HA

Thank you Marvin,

just to be clear,

I'm deploying an ASA 2130 in HA with ASA code. The activation key is true for either the Subscription APEX licenses and/or the perpetual? 

 
 
Highlighted
Hall of Fame Master

Re: Licensing Firepower ASA software Anyconnect APEX VPN HA

AnyConnect Apex is not available as a perpetual license - only 1, 3 or 5 years..

 

AnyConnect Plus is available as perpetual in addition to term-based.

 

My earlier reply holds true for AnyConnect Plus perpetual licenses.

 

If you purchase VPN Only licenses (which are not term-based and are perpetual) then those licenses are restricted to an individual appliance. If you have an HA pair the VPN only license can be shared from the Primary member to its mate.

CreatePlease to create content
Ask the Expert- DMVPN on Cisco routers