05-23-2012 12:13 PM
I can't seem to find a clear answer on this. I see that only 2 SSL VPN clients are included, but If I purchase an ASA 5510 (ASA5510-BUN-K9), am I allowed to use it as a VPN endpoint for up to 250 clients? If so, is that a total of both "site-to-site" and "client" VPN's?
Solved! Go to Solution.
05-23-2012 06:03 PM
For IPSec VPN (both site-to-site and remote access IPSec VPN client), there are no extra license required as it is included in the appliance.
For SSL VPN, there is default of 2 license, and if you require more than 2 SSL VPN Client connections, then yes, you would need to purchase extra license (either the AnyConnect Essentials license or the AnyConnect Premium license depending on what you need).
05-23-2012 06:03 PM
For IPSec VPN (both site-to-site and remote access IPSec VPN client), there are no extra license required as it is included in the appliance.
For SSL VPN, there is default of 2 license, and if you require more than 2 SSL VPN Client connections, then yes, you would need to purchase extra license (either the AnyConnect Essentials license or the AnyConnect Premium license depending on what you need).
05-24-2012 07:01 AM
Thanks. So does that mean I can have 250 site-to-site tunnels and 250 remote users connected simultaneously or is it a combination of both, meaning anything after i.e., 125 site-to-site tunnels and 125 concurrent remote users would be capped? I don't need that many users/tunnels, but I'd like to know the true limit for a planning and sales perspective. Thanks!!
05-24-2012 07:07 AM
Hi David,
Please check the link:
https://supportforums.cisco.com/message/3637206#3637206
Thanks,
Vishnu Sharma
05-24-2012 10:18 PM
Yes, you are correct. Total for both site-to-site and remote access vpn is 250. Anything after 250 will not connect.
here is the ASA model comparison for your reference:
http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html
01-03-2015 10:41 PM
Hi Jennifer,
can i use the below license part number for my site-to-site IPSEC VPN connectivity:
ASA5500-SSL-50
01-04-2015 04:46 AM
No extra license is required for site-to-site IPSec VPN.
The ASA5500-SSL-50 is only for SSL (AnyConnect VPN Client).
01-04-2015 11:21 PM
Thanks Jennifer for your prompt reply,
can u just explain in brief for site-to-site VPN, if i haven't require any license then how many site-to-site vpn i can configure in single device.
please give me little bit different on SSL Essential & Premium license.
01-05-2015 05:44 PM
For site-to-site VPN, it depends on the model of ASA that you are using. Here is the model comparison for your reference:
http://www.cisco.com/c/en/us/products/security/asa-5500-series-next-generation-firewalls/models-comparison.html
Please check out the number under "Site-to-site and IPsec IKEv1 client VPN user sessions"
In regards to SSL Essential and Premium license:
- Essential only supports SSL VPN full tunnel mode
- Premium supports all types of SSL VPN (client and clientless) as well as all the advanced feature.
Here is the URL for your reference:
http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/overview_c78-527488.html
Hope that helps.
01-27-2015 11:58 PM
Hi Jennifer
By reading the above feed, I learnt that I do NOT need to buy any "ASA5500-SSL-xxx" license on my ASA box if I just use "IPsec IKEv1 client VPN" for end users . Is that correct?
Then, what windows based IPSec client can I deploy for FREE? Can I still deploy Cisco Anyconnect client to my end users? Is the client free of charge?
Calvin
01-28-2015 02:32 AM
hi Calvin,
The IPSec IKEv1 client is included and no extra license is required.
For AnyConnect, the default is 2 Anyconnect Premium license, however, if you need to deploy AnyConnect full tunnel mode only client (for more than 2 users), you will need to purchase AnyConnect Essential license.
Hope that answers your questions.
01-28-2015 02:52 AM
Thanks Jennifer,
What desktop software I can deploy to end user laptop for the use of IPSec IKEv1?
Calvin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide