AnyConnect Premium Peers License

[yuchen.liu1025]

Recently replaced a Cisco ASA 5525 for remote users, but there is only 2 anyconnect premium peers as the attached figure shown (show activation-key detail). So how can i upgrade from 2 to its max capacity 750 peers and which exact license should i buy?  Please advice, thanks!

sh activation-key

[Marvin Rhoads · Accepted solution]

AnyConnect Premium is now known as AnyConnect Apex. It is available as a term license for 1-, 3- or 5-year terms. For a 1-year tem, the SKUs would be:

L-AC-APX-LIC=

L-AC-APX-1Y-S4

You buy quantity 750 of the first item and it has the associated licenses as the second item. For longer terms just substitute "1Y" with "3Y" or "5Y".

[yuchen.liu1025]

Thank you for your reply Marvin. I just looked at the AnyConnect Apex license on CDW.com. it seems like the license costs about 10 bucks for each user. So I need to buy the quantity of 750 to meet its max capacity of peers, is that correct?

Thanks,

Yuchen

[Marvin Rhoads]

List price varies according to how many licenses you buy in a given order. Cisco arranges the pricing in "tiers".

For 750 licenses the list pricing for that tier is US$6.40 per user.

If you want 750 unique users then, yes, you need 750 licenses.

[yuchen.liu1025]

gotcha thanks a lot.

[john.gudmann]

Hi Marvin

Can you please define "unique users" for me?
If we handle the user in separated authentication group will that be seen as Unique User?
I guess that AnyConnect software can be installed on as many PC we like to, but the Unique User can be managed by Authentication policy (We will be using Cisco ISE)

Thanks

[Marvin Rhoads]

A unique user is an individual person. No matter how many devices and policies they may be using at one time they only count as one user for licensing purposes.

Cisco doesnt try to sort them out and instead relies on you to be honest in buying enough licenses to cover the anticipated use.

[john.gudmann]

Great. Then we are aligned.
One more thing. Apex License. We are will use Apex License on ISE to do the host scan. I guess that means we don't need to have Apex license for AnyConnect. or?
Thanks John.

[Marvin Rhoads]

If you are using the Anyconnect ISE posture module on the clients for posture compliance scanning then you need AnyConnect Apex in addition to ISE Apex licenses.

If you're using the ISE temporal agent for posture compliance scanning then an AnyConnect license is not required