iPad AnyConnect Mobile licensing question

[edwardre1]

Hello,

I am setting up an ASA5505 to allow a VPN with certificate from AnyConnect Secure Mobility Client (iPad)

However I get a "No License" message back from the ASA, on the iPad - Anyconnect.

I remember reading the ASA5505 came with two licenses. Or am I wrong?

thank you for your help

Edward

[Jennifer Halim]

When connecting from iPad or any mobile devices, you would also need to have the AnyConnect Mobile license enabled.

The default 2 licenses allow connection from laptops only.

[edwardre1]

thanks for this.

what is the quickest way for me to purchase a licenses for the iPad Anyconnect Mobility?

[Jennifer Halim]

The only way would be to purchase it via Cisco Reseller/Partner.. you'll receive a PAK file that you can register online and generate the activation key that can be enabled on the ASA firewall.

[edwardre1]

ok I will find a partner here in Melbourne Australia to purchase the license.

Does this license represent the certificat used in the AnyConnect profile? or do I also have to purchase the certificate from a CA to be able to use certificates?

sorry about asking so many questions!

thank you

[Jennifer Halim · Accepted solution]

No, the AnyConnect mobile license only enable the ASA to accept SSL connection from mobile client.

If you would like to use certificate as the authentication, then you would need to purchase the certificate from a CA. OR, you can configure the ASA as the CA server and it can generate certificate for the client.

Alternatively, if you don't require certificate as the authentication, then CA certificate is not required at all.

[edwardre1]

when you say that "..OR, you can configure the ASA as the CA server and it can generate certificate for the client."

would you be so kind to point me to an up to date configuration example for my ASA5505 - 8.2 (1)?

thank you again

[Jennifer Halim]

Here is the configuration guide for ASA to be configured as CA server:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/cert_cfg.html#wp1085722

Hope that helps.

[edwardre1]

excellent support!

thank you Jennifer :-)