07-16-2014 04:06 AM - edited 02-21-2020 07:43 PM
My CCNP Firewall book states that the Anyconnect mobile license...
Enables AnyConnect client access for Windows Mobile touch screen devices (also requires AnyConnect Essentials or Premium license)
There wording here is a bit ambiguous. If I have only the AnyConnect Essentials license and try to connect to my clientless SSL VPN via an Android tablet, will I be unable to get on until I upgrade to an Anyconnect mobile?
Or is Anyconnect mobile only for client based VPNs that are installed on tablets?
Solved! Go to Solution.
07-16-2014 08:09 PM
hi,
both karthik and marvin are correct.
you'll need the anyconnect mobile license installed on your ASA (there's a free 90-day trial license).
links below shows using both clientless and client based VPN:
http://ccnpsecuritywannabe.blogspot.com/2014/07/anyconnect-vpn-client-for-iphone.html
http://ccnpsecuritywannabe.blogspot.com/2014/07/cisco-vpn-client-on-iphone.html
07-16-2014 04:47 AM
Hi Steve,
The condition is you should have Cisco AnyConnect Mobile License along with Anyconnect essentials or premium license to have the mobile based anyconnect enabling for apple/android...etc tablets / phones.
Table 2. Cisco AnyConnect Secure Mobility Client Licensing Options
License Requirements | Description |
Cisco ASA Platform License | Cisco AnyConnect Essentials[2] (P/N: (L-ASA-AC-E-55**=) 5, 10, 20, 40, 50, 80, 85) • Highly secure remote-access connectivity • Single license per ASA device model (not a per-user license); enables maximum simultaneous users on platform • Full-tunneling access to enterprise applications |
Cisco AnyConnect Premium[3] (P/N: (L-ASA-SSL-***=) 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10,000) • Also provides support for clientless SSL VPN and capabilities available on desktop Cisco AnyConnect platforms, including Cisco HostScan and Always-On VPN connectivity • License is based on number of simultaneous users and is available as a single device or shared license | |
Cisco AnyConnect Mobile License5 P/N: (L-ASA-AC-M-55*=) | • Enables mobile OS platform compatibility • Required (single license) per security gateway device, in addition to Essentials or Premium licenses • No per-user license required |
Regards
Karthik
07-16-2014 09:40 AM
I'm really looking to find out if Anyconnect Mobile Licensing is required for both client based and clientLESS VPNs.
So if I'm reading this correctly... it looks like the gateway you are dialing into (be it client based or clientless) is capable of detecting what OS your device is running.
Is this correct or should I be able to access the clientless SSL VPN regardless of the device I'm coming from? (assuming I dont have the license)
07-16-2014 06:22 PM
The ASA can detect your browser is a mobile device version and will not allow access unless you have AnyConnect for Mobile license activated.
This applies to either Clientless SSL VPN (AnyConnect Premium) or full tunnel SSL VPN (client-based).
07-16-2014 08:09 PM
hi,
both karthik and marvin are correct.
you'll need the anyconnect mobile license installed on your ASA (there's a free 90-day trial license).
links below shows using both clientless and client based VPN:
http://ccnpsecuritywannabe.blogspot.com/2014/07/anyconnect-vpn-client-for-iphone.html
http://ccnpsecuritywannabe.blogspot.com/2014/07/cisco-vpn-client-on-iphone.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide