New AnyConnect 4

[khan300]

Hi Experts,

My client has VPN client version 5.0.07.0440 .

They need simply 5 SSL VPN connections. I had proposed the "L-ASA-SSL-10=" premium license but later found out that its not end of life and I have to upgrade to Anyconnect 4.x.

The client already has a valid smartnet. My question is, should we just upgrade the VPN Client to the new Anyconnect 4 ? or something else is required for migration. He doesn't have any previous purchased licenses.

After that correct me if I'm wrong, below is the licenses he would want for his 5 SSL connection.

Line Number	Item Name	Description	Service Duration	Lead Time	Included Item	Quantity	ListPrice	Extended ListPrice	Discount %	Selling Price
1.0	L-AC-APX-1YR-G	Cisco AnyConnect 1-Yr Apex Subscription License Group	N/A	2 days	No	1	0.00	0.00	0	0.00
1.1	AC-APX-1YR-25-S	Cisco AnyConnect 1-Yr 25 User Apex License	N/A	2 days	No	1	0.00	0.00	0	0.00
1.1.0.1	AC-APX-1YR-25	Cisco AnyConnect 1-Yr 25 User Apex Subscription	12 month(s)	N/A	No	1	360.00	360.00	0	360.00
1.2	L-AC-APX-S-1Y-25	Cisco AnyConnect 1-Yr 25 User Apex (ASA License Key)	N/A	2 days	Yes	99999	0.00	0.00	0	0.00
						SubTotal				360.00
						Configset Total				360.00

Thanks 

[Marvin Rhoads]

They only need the Apex license if they want clientless SSL VPN or things like Advanced Endpoint Assessment, Posture Assessment, etc..

For AnyConnect full client SSL VPN (as a replacement for the old IPSec VPN client), the Base Plus (edit) license is fine.

Both include Mobile as well. Also, both are term-based (1, 3 or 5 years). So for 1-year term, the "L-AC-PLS-1YR-G" top level SKU with associated line items is what you'd need. The list price on that is a good bit less as well.

[khan300]

So basically what I posted is correct, he needs 5 ssl vpn licenses and he is getting 25 with Apex which is the minimum I can offer. Also he'll need to upgrade to anyconnect 4.x.

Your right list price is a lot cheaper but its on subscription base, so in the long run they'll make money off it.

THanks

[Marvin Rhoads]

They shouldn't need the Apex-based SKU, only Plus.

The full order detail for 1 year 25 users of AnyConnect Plus is:

L-AC-PLS-1YR-G		Cisco AnyConnect 1-Yr Plus Subscription License Group
AC-PLS-1YR-25-S		Cisco AnyConnect 1-Yr 25 User Plus License
AC-PLS-1YR-25		Cisco AnyConnect 1-Yr 25 User Plus Subscription
L-AC-PLS-S-1Y-25		Cisco AnyConnect 1-Yr 25 User Plus (ASA License Key)

That includes SSL VPN. List price is $25 per year.

With Plus they can also opt for a perpetual subscription - list price $165 for 25 users plus $33 per year for Smartnet support.  That's top line part number L-AC-PLS-P-G

[khan300]

Yeah but the client wants clientless ssl vpn, so I guess apex license is the correct one. The one I initially proposed.

Also i guess instead of cisco vpn Client which they have, they'll need to upgrade to cisco anyconnect secure mobility client.

[Marvin Rhoads · Accepted solution]

Correct - clientless is only supported on the AnyConnect 4.x Apex license if it's a new purchase.

Existing AnyConnect 3.x Premium licenses (now end of sales) will also support clientless.

The end user experience for clientless will be different than with a full tunnel (IPsec or SSL VPN) as they will only get services that can be exposed via a browser natively or via a plug-in.

[khan300]

I tried to give my client a anyconnect premium license but my local cisco distributor is saying end of sales, even though end of sales is August 31st. So that gives me no option to purchase the apex license and upgrade his current any connect 3 to 4.x

[Marvin Rhoads]

Yes - once we're down to the last couple of months in a product's lifecycle approaching end of sales hard cutoff they require the partner to submit special justification why we are selling an almost-obsolete product.

Overall it's intended to increase customer satisfaction since most would be unhappy to buy something only to find out a month later (often before they've even installed it) that it's already discontinued.