Any Connect License

[Vinh Phan Le Tien]

Dear friend.

Do anyone have experience in my case.

I want to configure BOM include 2x ASA5516 w/ FP Services and 25 Any Connect License.

I have choose this part:

2.0	L-AC-PLS-P-G	Cisco AnyConnect  Plus Perpetual License Group
2.0.1	CON-SAU-LACPLSPG	SW APP SUPP + UPGR Cisco AnyConnect Plus Perpetual License
2.1	AC-PLS-P-25-S	Cisco AnyConnect 25 User Plus Perpetual License
2.1.0.1	CON-SAU-ACPL25	SW APP SUPP + UPGR Cisco AnyConnect 25
2.2	L-AC-PLS-P-25	Cisco AnyConnect 25 User Plus Perpetual (ASA License Key)

Is it right?

How many SKU (L-AC-PLS-P-G) do I need for 2 box.

Thanks.

Vinh Phan

[Marvin Rhoads · Accepted solution]

Assuming they are in a High Availability pair or cluster, only a single license SKU is required.

[Vinh Phan Le Tien]

Thanks Marvin

It means with above license, we can use AnyConnect VPN feature on ASA and doesn't need any additional license. Is it right?

Vinh Phan

[Marvin Rhoads · Accepted solution]

You're welcome. The AnyConnect Plus license includes all basic AnyConnect functionality for SSL and IPsec (IKEv2) remote access VPN from remote PCs and mobile devices. The one you cited supports 25 simultaneous users.

Advanced features like endpoint posture assessment and remediation require the Apex license.

[kasper123]

Hi Marvin,

We are in the process of assigning a license to our HA pair of 5516X (active/passive) and the licensing portal is asking for PCB Serial number(from Show Ver):.

Which serial should we use since there are two ASA with different serial numbers?

Regards.

[Rahul Govindan]

You can use any one of the ASA serial numbers as the licenses are shared among the Active and Standby unit. In most cases, the primary ASA serial number is sufficient.

[Manjunath S Chickmath]

Hi Govind,

You mean to say that if i am buying 2 pair of ASA 5515X , so i can buy one license for anyconnect/SSL vpn and that can be used in Both firewall during High Availability (HA) ?

[Rahul Govindan]

If you have a pair of ASA5515-X firewalls in Active/Standby HA, you only need one license for both the Firewalls. Both the firewalls will share the license as long as they are in HA.

[Manjunath S Chickmath]

thanks a lot

[Manjunath S Chickmath]

for Site to site vpn also will be the single license is enough in HA ?

[Marvin Rhoads]

Site to site VPN does not require any add-on license.

They are included in the Base license which permits 250 "Other VPN Peers". 

[Manjunath S Chickmath]

thank you...