Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Cisco Secure Remote Access: VPN Licensing Overview

  • Viewing Options

  • PDF (211.3 KB)
  • Feedback

This document provides an overview of the remote-access VPN licensing options available for use with Cisco® ASA 5500 Series Adaptive Security Appliances. Table 1 lists and describes these options.

Table 1. Remote-Access VPN Licensing Options for Cisco ASA 5500 Adaptive Security Appliances

License Name

Platform/Version Compatibility

Description

Sample SKUs

AnyConnect Premium SSL VPN Edition (singledevice)

All ASA models (Cisco ASA 5505to ASA 5580)
Cisco ASA Software Release 8.0 and later
Premium capabilities, including clientless Secure Sockets Layer (SSL) VPN, Cisco AnyConnect Secure Mobility, Cisco Secure Desktop (Host Scan and Vault), and Cisco AnyConnect Secure Mobility client connectivity; optionally provides full tunneling access to enterprise applications
Available as premium bundles, options, spares, and upgrades
ASA55XX-SSLYY-K9 (Bundle)
ASA5500-SSL-XX= (Sparelicense)
ASA-SSL-XX-YY= (Upgrade license)
Available for specific license sizes (simultaneous users)

Flex Licenses (single device)

Cisco ASA 5510 to ASA 5580 (Cisco ASA 5505 not included)
Cisco ASA Software Release 8.0.4 and later
56 day temporary licenses for pandemic or business continuity (premium features)
ASA-VPN-FL-XX=
Available for 250, 750, 1000, 2500, 5000, and 10,000 simultaneous users

AnyConnect Premium SSL VPN Edition shared license (maindevice and participant device)

Cisco ASA 5510 toASA 5580 (Cisco ASA 5505notincluded)
Available in specific license size increments
Cisco ASA Software Release 8.2 and later
Same capabilities as single-device license, but SSL user count may be shared among any number of internally connected devices that have an installed participant license
ASA-VPNS-XX= (mainserver)
ASA-VPNP-55XX= (participantlicense required for additional devices)

AnyConnect Essentials

All ASA models (Cisco ASA 5505to ASA 5580)
Cisco ASA Software Release 8.2 and later
Cisco AnyConnect Secure Mobility client connectivity without clientless SSL VPN and Cisco Secure Desktop capabilities
Cisco AnyConnect Secure Mobility capabilities that may be used in conjunction with a licensed Cisco IronPort™ Web Security Appliance
Full tunneling access to enterprise applications
ASA-AC-E-55XX=

AnyConnect Mobile

All ASA models (Cisco ASA 5505to ASA 5580)
Cisco ASA Software Release 8.0.4 and later
Enables mobile OS platform compatibility
Required per device in addition to essentials or premium licenses
ASA-AC-M-55XX=

Advanced Endpoint Assessment

All ASA models (Cisco ASA 5505to ASA 5580)
Cisco ASA Software Release 8.0.3 and later
Enables advanced endpoint assessment capabilities (such as auto-remediation)
Required per device in addition to premium licenses; not available for essentials licenses
ASA-ADV-END-SEC=

Electronic License Delivery (eDelivery)

Most licenses are available for electronic delivery; this process significantly accelerates license fulfillment time. To order a license electronically, be sure to order part number(s) that begin with “L-.”

Active/Standby Configurations

Beginning with the Cisco ASA Software Release 8.3, duplicate licenses are no longer required for Active/Standby configurations. License options will be combined together.