Cisco AnyConnect License Confusion

[uzair.infotech]

Hi,

My customer want to buy two ASA5516-FPWR-K9 with Cisco ASA5516 FirePOWER IPS, AMP and URL Licenses and one Cisco Firepower Management Center,(VMWare) for 2 devices.Both firewall will be deployed in Active/Standby mode.

He also want to buy Cisco AnyConnect 25 User Plus Perpetual License for his 25 users. My Question is how many licenses are required for AnyConnect?Is one AC-PLS-P-25-S license is enough to share on both firewall or two AC-PLS-P-25-S licenses are required?Please Help.

Regards,

Uzair Hussain

[Marvin Rhoads]

Only one license is needed.

You would order L-AC-PLS-P-G with User license AC-PLS-P-zzzz-S. (zzzz = number of unique authorized users). The PAK received can be redeemed on multiple headend ASAs.

Also, for perpetual licenses only, a SASU contract required for software access and support.

All of the above is explained on the AnyConnect Ordering Guide.

Usually is is cheaper to just buy the 5 year term license which does not require the SASU support.

Note the FirePOWER feature license needs to be ordered for each appliance.

[uzair.infotech]

Hi Marvin,

Thanks for the reply. What if i want to deploy the same two ASA in standalone mode for different purpose in the same organization rather than Active/Standby mode. Will it require one or two licenses?

Regards,

Uzair Hussain

[Marvin Rhoads]

It's the same scheme. AnyConnect Plus and Apex licenses are per number of unique authorized users.

Among AnyConnect license types, only "VPN Only" licenses are per ASA.