What does AnyConnect Mobile actually enable

[steven.crutchley]

My CCNP Firewall book states that the Anyconnect mobile license...

Enables AnyConnect client access for Windows Mobile touch screen devices (also requires AnyConnect Essentials or Premium license)

There wording here is a bit ambiguous. If I have only the AnyConnect Essentials license and try to connect to my clientless SSL VPN via an Android tablet, will I be unable to get on until I upgrade to an Anyconnect mobile?

Or is Anyconnect mobile only for client based VPNs that are installed on tablets?

[nkarthikeyan]

Hi Steve,

The condition is you should have Cisco AnyConnect Mobile License along with Anyconnect essentials or premium license to have the mobile based anyconnect enabling for apple/android...etc tablets / phones.

Table 2. Cisco AnyConnect Secure Mobility Client Licensing Options

License Requirements (each license below is required)	Description
Cisco ASA Platform License	Cisco AnyConnect Essentials[2] (P/N: (L-ASA-AC-E-55**=) 5, 10, 20, 40, 50, 80, 85) • Highly secure remote-access connectivity • Single license per ASA device model (not a per-user license); enables maximum simultaneous users on platform • Full-tunneling access to enterprise applications
	Cisco AnyConnect Premium[3] (P/N: (L-ASA-SSL-***=) 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10,000) • Also provides support for clientless SSL VPN and capabilities available on desktop Cisco AnyConnect platforms, including Cisco HostScan and Always-On VPN connectivity • License is based on number of simultaneous users and is available as a single device or shared license
Cisco AnyConnect Mobile License5 P/N: (L-ASA-AC-M-55*=) 5, 10, 20, 40, 50, 80, 85	• Enables mobile OS platform compatibility • Required (single license) per security gateway device, in addition to Essentials or Premium licenses • No per-user license required

Regards

Karthik

[steven.crutchley]

I'm really looking to find out if Anyconnect Mobile Licensing is required for both client based and clientLESS VPNs.

So if I'm reading this correctly... it looks like the gateway you are dialing into (be it client based or clientless) is capable of detecting what OS your device is running.

Is this correct or should I be able to access the clientless SSL VPN regardless of the device I'm coming from? (assuming I dont have the license)

[Marvin Rhoads]

The ASA can detect your browser is a mobile device version and will not allow access unless you have AnyConnect for Mobile license activated.

This applies to either Clientless SSL VPN (AnyConnect Premium) or full tunnel SSL VPN (client-based).

[johnlloyd_13 · Accepted solution]

hi,

both karthik and marvin are correct.

you'll need the anyconnect mobile license installed on your ASA (there's a free 90-day trial license).

links below shows using both clientless and client based VPN:

http://ccnpsecuritywannabe.blogspot.com/2014/07/anyconnect-vpn-client-for-iphone.html

http://ccnpsecuritywannabe.blogspot.com/2014/07/cisco-vpn-client-on-iphone.html