Anyconnect remote questions

[easynet]

Hi,

I'm currently required your help regarding the cisco remote access solution.

My customer using at the moment the old solution Cisco VPN client, but he is migrating his computer to windows 10.

Cisco vpn client doesn't support windows 10.

He tries to download on cisco the last version remote user named : Cisco AnyConnect, without success, he is not allowed.

I think we need to install a licence named : ANY CONNECT Prenium Peers.

Could you please confirm my suspicions ?

Regards/Cordialement.

Julien

[Rahul Govindan · Accepted solution]

You would need to purchase the Anyconnect Plus or Apex license and link the contract to your CCO id to be able to download the Anyconnect software from the Cisco download page. Please refer to section 6.1 in the ordering guide below:

https://www.cisco.com/c/dam/en/us/products/collateral/security/anyconnect-og.pdf

In your case, I would assume the Anyconnect Plus license would suffice to have basic VPN connectivity to a headend like the ASA.

[easynet]

Thanks a lot for your quick answer !

I've a last question.

Before to buy and install this license, i want to confirm, if i can't see the licence its because the firewall has an old IOs version ?

Cisco asa 5510 :

Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.4(5)

Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 100
Inside Hosts                   : Unlimited
Failover                       : Active/Active
VPN-DES                        : Enabled
VPN-3DES-AES                   : Enabled
Security Contexts              : 2
GTP/GPRS                       : Disabled
SSL VPN Peers                  : 2
Total VPN Peers                : 250
Shared License                 : Disabled
AnyConnect for Mobile          : Disabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials          : Disabled
Advanced Endpoint Assessment   : Disabled
UC Phone Proxy Sessions        : 2
Total UC Proxy Sessions        : 2
Botnet Traffic Filter          : Disabled

Because, for another customer, with the same model (Cisco ASA 5510) but more recent version i can see the licence (even if we have bought it).

Version :

Cisco Adaptive Security Appliance Software Version 8.4(7)30
Device Manager Version 7.5(1)

License :

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 100            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active  perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 50             perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 250            perpetual
Total VPN Peers                   : 250            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual

[Rahul Govindan]

The ASA 5510 only has the 2 default SSLVPN licenses on it:

SSL VPN Peers                  : 2

This default license does not provide entitlement to download the Anyconnect 4.x versions from the Cisco download page. The Anyconnect Plus and Apex license will provide you an activation key that will increase the number from 2 to the 250.

The other customer has 50 Anyconnect Premium licenses:

AnyConnect Premium Peers          : 50             perpetual

The name difference ("SSL VPN Peers" vs "Anyconnect Premium Peers") is because the second customer has a newer version. But they are essentially the same license. In short, Customer#1 does not have a license while Customer#2 has 50 Anyconnect licenses installed.

[easynet]

HI Rahul,

Thanks again for your quick answer. It was Really helpful !

[Karsten Iwen]

Actually, it's not that easy with the licenses. The second customer has only AnyConnect 3 licenses, which also don't give acces to the actual AnyConnect 4 software. And AC3 is EOL and should ideally not be used any more as there won't be any more security fixes.