Anyconnect Premium ASA License reduced

[arnav.prasad]

We are encountering license issue on one of our firewalls after upgrading ASAv from IOS version 9.12(3)12 to 9.14(2)15

Before upgrade we had VPN License (Anyconnect Premium Peers) for 750 users, which got reduced to 250 users only after upgrade.

Before Upgrade:

License mode: AWS Licensing
License state: LICENSED

Licensed features for this platform:
Maximum VLANs : 200
Inside Hosts : Unlimited
Failover : Active/Standby
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 0
Carrier : Enabled
AnyConnect Premium Peers : 750
AnyConnect Essentials : Disabled
Other VPN Peers : 750
Total VPN Peers : 750
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 998
Botnet Traffic Filter : Enabled
Cluster : Disabled

After Upgrade:

License mode: AWS Licensing
License state: LICENSED

Licensed features for this platform:
Maximum VLANs : 50
Inside Hosts : Unlimited
Failover : Active/Standby
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 0
Carrier : Enabled
AnyConnect Premium Peers : 250
AnyConnect Essentials : Disabled
Other VPN Peers : 250
Total VPN Peers : 250
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 500
Botnet Traffic Filter : Enabled
Cluster : Disabled

Can any help why it is reduced and how can we go back to 750 again.

[Mohammed al Baqari]

Not sure whether you use PAK based on smart licensing. If smart licensing
try to readd the device. Otherwise, open a ticket with Cisco licensing.

**** please remember to rate useful posts

[Karsten Iwen]

Did you change, perhaps by accident, from ASAv30 to ASAv10? The new values are exactly what to expect from ASAv10.

[Marvin Rhoads]

I'm with @Karsten Iwen  on this one. Check your VM specs ("show vm" from the cli).

[arnav.prasad · Accepted solution]

On researching, it was found out to be a resource issue.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/asav/getting-started/asav-914-gsg/asav_intro.html#id_123423 

In Release notes of 9.14, it is written that instance memory should be more than 8GB to support 750 VPN licenses, otherwise it will get reduced to 250 licenses according to memory size of instance.

Solution:

Build a new instance we adequate memory to support 750 VPN licenses.