If you choose to deploy A Firepower appliance with ASA software in HA, do you require two sets of subscription licenses for Anyconnect VPN subscription licences (Plus or apex)
How does it apply to Active/active and active /Standby deployments?
Anyconnect 4.x (and later) Plus and Apex are licensed per unique user. You can redeem the PAKs on multiple devices. In the case of an ASA HA pair (either Active-Standby or Active-Active or even in a cluster or multiple ASAs) you only need apply a single AnyConnect activation key. You have the option of applying them on all the appliances but the HA/cluster will operate either way.
The only corner case consideration is if you had only licensed the Primary ASA and the HA was broken and the Standby unit was active for >30 days without the licensed Primary having rejoined, you would then need an AnyConnect license on the Standby-Active unit.
Thank you Marvin,
just to be clear,
I'm deploying an ASA 2130 in HA with ASA code. The activation key is true for either the Subscription APEX licenses and/or the perpetual?
AnyConnect Apex is not available as a perpetual license - only 1, 3 or 5 years..
AnyConnect Plus is available as perpetual in addition to term-based.
My earlier reply holds true for AnyConnect Plus perpetual licenses.
If you purchase VPN Only licenses (which are not term-based and are perpetual) then those licenses are restricted to an individual appliance. If you have an HA pair the VPN only license can be shared from the Primary member to its mate.