anyconnect mobile license

[Dennis Olvany]

I have consulted a Cisco partner, as well as two different sources at Cisco and it seems remarkably difficult to find someone with solid answers on anyconnect mobile licensing. I've got a pair of 5550s running 8.3.2 in active/standby. Based on the following license configuration, what do I need to support mobile clients? Anyconnect for mobile is obvious. Essentials? Since changes in 8.3 can I get away with one anyconnect for mobile license or do I need one per firewall? How many mobile clients would I be licensed for, 2500 per firewall? Anything else I'm missing?

Licensed features for this platform:

Maximum Physical Interfaces    : Unlimited      perpetual

Maximum VLANs                  : 250            perpetual

Inside Hosts                   : Unlimited      perpetual

Failover                       : Active/Active  perpetual

VPN-DES                        : Enabled        perpetual

VPN-3DES-AES                   : Enabled        perpetual

Security Contexts              : 2              perpetual

GTP/GPRS                       : Disabled       perpetual

SSL VPN Peers                  : 2500           perpetual

Total VPN Peers                : 5000           perpetual

Shared License                 : Disabled       perpetual

AnyConnect for Mobile          : Disabled       perpetual

AnyConnect for Cisco VPN Phone : Disabled       perpetual

AnyConnect Essentials          : Disabled       perpetual

Advanced Endpoint Assessment   : Disabled       perpetual

UC Phone Proxy Sessions        : 2              perpetual

Total UC Proxy Sessions        : 2              perpetual

Botnet Traffic Filter          : Disabled       perpetual

Intercompany Media Engine      : Disabled       perpetual

This platform has an ASA 5550 VPN Premium license.

Failover cluster licensed features for this platform:

Maximum Physical Interfaces    : Unlimited      perpetual

Maximum VLANs                  : 250            perpetual

Inside Hosts                   : Unlimited      perpetual

Failover                       : Active/Active  perpetual

VPN-DES                        : Enabled        perpetual

VPN-3DES-AES                   : Enabled        perpetual

Security Contexts              : 4              perpetual

GTP/GPRS                       : Disabled       perpetual

SSL VPN Peers                  : 5000           perpetual

Total VPN Peers                : 5000           perpetual

Shared License                 : Disabled       perpetual

AnyConnect for Mobile          : Disabled       perpetual

AnyConnect for Cisco VPN Phone : Disabled       perpetual

AnyConnect Essentials          : Disabled       perpetual

Advanced Endpoint Assessment   : Disabled       perpetual

UC Phone Proxy Sessions        : 4              perpetual

Total UC Proxy Sessions        : 4              perpetual

Botnet Traffic Filter          : Disabled       perpetual

Intercompany Media Engine      : Disabled       perpetual

This platform has an ASA 5550 VPN Premium license.

[Jennifer Halim]

"AnyConnect mobile" license is not a user based license, ie: it is an "enable" or "disable" type license for SSL VPN connection from mobile client.

"AnyConnect mobile" license needs to be combined with either AnyConnect Essestial license, or AnyConnect Premium license.

As per the output posted, you already have AnyConnect Premium license, therefore, you only need to purcahse "AnyConnect mobile" license to connect from mobile client.

Here is the licensing page for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa83/license_standalone/license_management/license.html#wp1427928

(pls go to "AnyConnect Mobile" section)

and also this:

http://www.cisco.com/en/US/docs/security/asa/asa83/license_standalone/license_management/license.html#wp1428033

In terms of what mobile platform is supported, please kindly check the corresponding release notes of AnyConnect accordingly:

http://www.cisco.com/en/US/products/ps10884/prod_release_notes_list.html

Hope that helps.

[Dennis Olvany]

Thanks.

[Jennifer Halim]

Pls  kindly mark the post as answered if you have no further question. Thanks.

[emilio1973]

Hi, I have a doubt with this theme: add the output of "sh ver" command" of my ASA

Licensed features for this platform:
Maximum Physical Interfaces  : Unlimited
Maximum VLANs                : 150
Inside Hosts                 : Unlimited
Failover                     : Active/Active
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
Security Contexts            : 2
GTP/GPRS                     : Disabled
VPN Peers                    : 750
WebVPN Peers                 : 50
AnyConnect for Mobile        : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions            : 2

This platform has an ASA 5520 VPN Plus license.

Do I need upgrade to Premiun license and enable AnyConnect for mobile? I would like to connect either with Android and IOS device.

Thanks

[Jennifer Halim]

Base on the show version output, you already have the Premium license (WebVPN Peers                 : 50), all you have to do is to purchase the "AnyConnect for Mobile" if you want to connect from Android or IOS device.

[emilio1973]

Hi Jennifer, thanks for reply. I thought that was not premium license because of message at the end of output. (This platform has an ASA 5520 VPN Plus license.

Sent from Cisco Technical Support iPhone App