Anyconnect Licenses

[ZK916]

Hello, 

 We have 2 x ASA-5555 configured in an HA. A former engineer purchased a quantify of two of this SKU CON-ECMU-ACPL100 -- this is the licenses for the Anyconnect client VPN. I wanted to find out if that means that we have 100 seats which are tied to each ASA or a total of 200 licenses are tied to the HA pair. 

I was hoping that someone could clarify. 

Thanks in advance. 

\

Best, ~zK 

[balaji.bandi]

if they bought  quantify of two of this SKU CON-ECMU-ACPL100 - then you should see 200 License.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/intro-license.pdf

[ZK916]

Thanks for the reply. 

So, all 200 licenses would be supported by the ACTIVE FW, correct? 

\

Best, ~zK 

[Aref Alsouqi]

That's correct, with Cisco firewalls the licenses are shared across the HA pair and they will effectively be used by the active firewall.

[balaji.bandi]

Yes, that is correct. In HA, only active (active/standby) do all the processing, so you have 200 License active to use all the time