There you can find the the guides for using and ordering considerations for DNA licenses, either way my advise will be to check with your reseller since in this case any of those license will enable the securityk9 feature allowing you to configure VPN S2S tunnels and FlexVPN.
Hope this info helps!
-JP-
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: