ASA License for IP Phone and Mobile VPN Connections

Introduction

This document summarizes the licenses you need in order to connect your IP phones and mobile VPN devices to your adaptive security appliance (ASA).

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Q. What ASA license is needed for IP phone and mobile VPN connections?

A. This table summarizes the license options and requirements:

	AnyConnect Premium SSL License (L-ASA-SSL-xxxx)	AnyConnect Essentials License (L-ASA-AC-E-55xx)	AnyConnect Mobile License (L-ASA-AC-M-55xx)	AnyConnect for Cisco VPN Phone (L-ASA-AC-PH-55xx)	Encryption License (DES/3DES/AES)
Cisco IP Phone	Required			Required	Required
Cell Phones (mobile OS)	Option 1*	Option 2*	Required		Required
Apple iPad, iPod	Option 1*	Option 2*	Required		Required
Jabber Secure Connect		Required			Required

Note: The AnyConnect Essentials license cannot be active at the same time as the AnyConnect Premium Secure Sockets Layer (SSL) license.

* For mobile devices, they must have either an AnyConnect Premium SSL license (Option 1) or AnyConnect Essentials license (Option 2) license installed on the ASA

Option 1: The AnyConnect Premium SSL license can:

• Enforce dynamic access policies (DAP) on supported mobile devices based on DAP attributes and on any other existing endpoint attributes. This includes the ability to deny or allow remote access from a mobile device.

Option 2: The AnyConnect Essentials license can:

• Enable or disable mobile device access on a per group basis, and configure the group access feature using the Adaptive Security Device Manager (ASDM).

• Display information about connected mobile devices by CLI or ASDM without the ability to enforce DAP policies or to deny or allow remote access to those connected mobile devices.

Related Information

• Technical Support & Documentation - Cisco Systems