What does ASA5506-SEC-BUN-K9 ASA 5506 with FirePOWER services and Sec Plus license include ?

[ACHAL KRISHNA]

Does the Sec Plus license include these three subscriptions ( IP, AMP, URL Filter) ?

Also can thee license L-ASA5506-SEC-PL ASA 5506 Security Plus - be applied to any of these ASA PART#s: ASA5506W-A-K9 or ASA5506-X or ASA5506H ?

Thanks!

[Rahul Govindan]

No, the security plus does not include the Firepower license. You need a separate license for the IPS, AMP and URL licenses. The part number for all 3 features should be: L-ASA5506-TAMC=.

The security plus license is only required on the 5506-X and the 5506H-X. The 5506H-X already has 30 VLANs and Active/Standby Failover features that the Security plus enables.

[intersectech]

Hi, I would like to ask if ASA5506-SEC-BUN-K9 always includes the perpetual license for APEX VPN technology, or it can change from the sales region.

Which command ("show version" for example) is used to see if APEX Vpn is active?
What output should I expect?
I would also like to know if the EOL date of the ASA5506 appliances with ASA software is already known.

Thank you

========Firewall Output========

ciscoasa# sh ver

Cisco Adaptive Security Appliance Software Version 9.9(2)

Firepower Extensible Operating System Version 2.3(1.84)

Device Manager Version 7.10(1)

Compiled on Sun 25-Mar-18 17:29 PDT by builders

System image file is "disk0:/asa992-lfbff-k8.SPA"

Config file at boot was "startup-config"

ciscoasa up 6 days 2 hours

Hardware:   ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)

Internal ATA Compact Flash, 8000MB

BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)

                             Number of accelerators: 1

 1: Ext: GigabitEthernet1/1  : address is xxxx.xxxx.1064, irq 255

 2: Ext: GigabitEthernet1/2  : address is xxxx.xxxx.1065, irq 255

 3: Ext: GigabitEthernet1/3  : address is xxxx.xxxx.1066, irq 255

 4: Ext: GigabitEthernet1/4  : address is xxxx.xxxx.1067, irq 255

 5: Ext: GigabitEthernet1/5  : address is xxxx.xxxx.1068, irq 255

 6: Ext: GigabitEthernet1/6  : address is xxxx.xxxx.1069, irq 255

 7: Ext: GigabitEthernet1/7  : address is xxxx.xxxx.106a, irq 255

 8: Ext: GigabitEthernet1/8  : address is xxxx.xxxx.106b, irq 255

 9: Int: Internal-Data1/1    : address is xxxx.xxxx.1063, irq 255

10: Int: Internal-Data1/2    : address is 0000.0001.0002, irq 0

11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0

12: Int: Internal-Data1/3    : address is 0000.0001.0003, irq 0

13: Ext: Management1/1       : address is xxxx.xxxx.1063, irq 0

14: Int: Internal-Data1/4    : address is 0000.0100.0001, irq 0

Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 30             perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Standby perpetual

Encryption-DES                    : Enabled        perpetual

Encryption-3DES-AES               : Enabled        perpetual

Carrier                           : Disabled       perpetual

AnyConnect Premium Peers          : 50             perpetual

AnyConnect Essentials             : 50             perpetual

Other VPN Peers                   : 50             perpetual

Total VPN Peers                   : 50             perpetual

AnyConnect for Mobile             : Enabled        perpetual

AnyConnect for Cisco VPN Phone    : Enabled        perpetual

Advanced Endpoint Assessment      : Enabled        perpetual

Shared License                    : Enabled        perpetual

Total TLS Proxy Sessions          : 100            perpetual

Botnet Traffic Filter             : Enabled        perpetual

Cluster                           : Disabled       perpetual

This platform has an ASA 5506 Security Plus license.

Serial Number: XXXXXXXXX

Running Permanent Activation Key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Configuration register is 0x1

Image type                : Release

Key Version               : A

Configuration has not been modified since last system restart.

[Marvin Rhoads]

Please don't double post the same question.

Answered here:

https://community.cisco.com/t5/firewalls/cisco-asa-5506-x-vpn-license/m-p/3300237