cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
652
Views
0
Helpful
1
Replies

VPN only license for HA

passakorn.m
Level 1
Level 1

i have ASA with vpn only perpetual license. i am going to buy another ASA for HA Standby.

Do i need to buy vpn only perpetual license for HA Box?

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

No you do not.

"For active/standby pairs, only the primary headend is required to have a VPN Only license."

Source: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200191-AnyConnect-Licensing-Frequently-Asked-Qu.html#anc6

If you should lose the primary unit due to equipment failure, the Secondary unit operating in Active role will continue to recognize the "shared" license for 30 days.

Source: http://www.ciscopress.com/articles/article.asp?p=2209314&seqNum=3

If the Primary unit is RMA'd under support, Cisco licensing will re-issue a new VPN only license for it.