Question about ASA5515 Anyconnect License

[shoeb1718]

Hi,

We have a customer who has already got Cisco ASA 5515-X with SEC PLUS and Cisco Anyconnect Essentials perpetual license in production.

They need to have a standby 5515 deployed to form a failover pair with the existing one for redundancy.

Just wanted to understand if the new 5515 needs to have Anyconnect Essentials license or it can utilize the ones from the existing production FW when it will be deployed in failover.

Regards,

Shoeb

[Mohammed al Baqari]

Hi,

This license model isn't present anymore. It used to be in AnyConnect 3.x
which is out of support. Answering your question, yes please the ASA PAK is
tagged with ASA serial number.

**** please remember to rate useful posts

[shoeb1718]

Thanks Mohammed for your response.

Yes, we are aware that this license model is not supported anymore and unfortunately the customer did not migrate to new model. Moreover, the 5515 is going to be EOS in 2022, however due to budget constraints the customer would like to utilize the existing licenses.

I read somewhere that the licenses can be shared between the HA/failover pair but need to confirm the same.

From your response it seems we need to have the same set of licenses on the new 5515. Do you have a reference doc or link I can refer to.

Also, I will try to dig in and find out or try to recall where I read about the license sharing.

Regards,

Shoeb

[Mohammed al Baqari · Accepted solution]

I think I confused you. What I meant that ASA activation need pak per
unit. For Anyconnect license, it is shared between HA pair. No need for two
anyconnect licenses. Hope this is clear.

**** please remember to rate useful posts

[shoeb1718]

Thank you Mohammed for your response.

One more query - is it possible to have one ASA in the HA pair have Anyconnect Essentials and the other Anyconnect Premium - although features related to Essentials will only be used. This is the query from the customer as they are finding it difficult to match the new ASA with existing prod one.

[Mohammed al Baqari · Accepted solution]

No this is not possible. ASAs in HA pair will have replication of feature
set, configs, sessions (if stateful), etc. You can't have different feature
sets between units in same HA group.

*** please remember to rate useful posts