ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
356
Views
0
Helpful
5
Replies
Highlighted
Beginner

COVID-19 Anyconnect For ASA-SM

Hi everyone

First of all i hope you all are safe from this pandemic.

I saw following link about "Emergency COVID-19 AnyConnect License". would you please anyone confirm this procedure is working for multiple context ASA-SM also? and what part numbers should i order after 90 days?

For the record, I am using 2 ASA-SM in multiple context mode. i have a RA-Context for Anyconnect.

 

L-AC-APX-3Y-S1 -> Cisco AnyConnect Apex License, 3YR, 25-99 Users

L-AC-APX-LIC= -> Cisco AnyConnect Apex Term License, Total Authorized Users

 

L-AC-PLS-3Y-S1 -> Cisco AnyConnect Plus License, 3YR, 25-99 Users

L-AC-PLS-LIC= -> Cisco AnyConnect Plus Term License, Total Authorized Users

 

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215330-obtaining-an-emergency-covid-19-anyconne.html

 

 

Thanks in advance.

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Hall of Fame Guru

Re: COVID-19 Anyconnect For ASA-SM

As you discovered, using remote access SSL VPN with multiple context mode on any ASA platform requires AnyConnect Apex licensing.

You cannot use AnyConnect Plus licensing of any type (term or perpetual).

AnyConnect 4.x term license PAKs can be redeemed on multiple physical appliances as it is licensed per unique user not per device. So you buy licenses according to the number of users you have and then redeem the single PAK for both the Primary and Secondary unit in your HA pair.

View solution in original post

5 REPLIES 5
Highlighted
VIP Mentor

Re: COVID-19 Anyconnect For ASA-SM

Highlighted
Beginner

Re: COVID-19 Anyconnect For ASA-SM

Thanks for your replay balaji.bandi,

 

looks like my multiple context asa-sm clearly need AnyConnect Apex.

here is the log:

 

Group <XXXXX> User <XXX> IP <x.x.x.x> Session terminated, no AnyConnect Apex license available.

 

also i find out in many documents that apex license is required for Anyconnect in multiple context mode. apex lic.jpg

if they both doing same job, is it possible to get AnyConnect Plus perpetual license instead of Apex Term License in multiple context scenario?

 

And just one more question. Should i order AnyConnect Plus/Apex Licenses for each pair of physical asa-sm separately in case of failover or just for primary asa-sm. what is the exact procedure? 

 

There is two way in my mind, i don't know which way should i go.

1-if i get 2 separate PAK and active one with active asa-sm serial number and second one with standby unite serial number.

2-order 1 PAK, in time of activation i should register both active and standby units serial numbers in one PAK activation, and install lic file/activation code on both chassis.

 

would you please help which one is the correct approach?

 

Thanks for you time.

Highlighted
VIP Mentor

Re: COVID-19 Anyconnect For ASA-SM

APEX most of the time used for posture checks, are you doing in your environment :

 

Can you give us more information before we can guide better - i have only provided the use case of the license information you have asked in the original post.

 

Please do explain more about your setup - apart from multi-context.

 

or contact the License team / Local cisco partner they can suggest to you better after auditing your environment.

 

 

 

 

BB
*** Rate All Helpful Responses ***
Highlighted
Hall of Fame Guru

Re: COVID-19 Anyconnect For ASA-SM

As you discovered, using remote access SSL VPN with multiple context mode on any ASA platform requires AnyConnect Apex licensing.

You cannot use AnyConnect Plus licensing of any type (term or perpetual).

AnyConnect 4.x term license PAKs can be redeemed on multiple physical appliances as it is licensed per unique user not per device. So you buy licenses according to the number of users you have and then redeem the single PAK for both the Primary and Secondary unit in your HA pair.

View solution in original post

Highlighted
Beginner

Re: COVID-19 Anyconnect For ASA-SM

Thank you  Marvin Rhoads, that was a clear crystal answer like ever sir. I am going to get an Emergency COVID-19 AnyConnect License first after that i hope we can order apex license to continue our business.

 

Thanks for your time.