Guest

Hierarchical Navigation

Secure Remote Access and VPN

Cisco Secure Remote Access: VPN Licensing Overview

This document provides an overview of the remote-access VPN licensing options available for use with Cisco® ASA 5500 Series Adaptive Security Appliances.

License Name

Platform/Version Compatibility

Description

Sample SKUs

AnyConnect Premium SSL VPN Edition (single device)

• All ASA models (5505 to 5580)
• Cisco ASA Software Release 8.0 and later
• Premium SSL VPN capabilities, including clientless SSL VPN, Cisco Secure Desktop (Host Scan and Vault), and AnyConnect connectivity. Optionally provides Full Tunneling access to Enterprise applications.
• Available as Premium bundles, options, spares, and upgrades.
• ASA55XX-SSLYY-K9 (Bundle)
• ASA5500-SSL-XX= (Spare license)
• ASA5500-SSL-XX-YY= (Upgrade license)
• Available for specific license sizes (simultaneous users)

FLEX Licenses (single device)

• Cisco ASA 5510 to 5580 (5505 not included)
• Cisco ASA Software Release 8.0.4 and later
• 60-day temporary licenses for pandemic or business continuity (Premium features).
• ASA-VPN-FL-XX=
• Available for 250, 750, 1000, 2500, 5000, and 10,000 simultaneous users

AnyConnect Premium SSL VPN Edition Shared License (main device and participant device)

• Cisco ASA 5510 to 5580 (5505 not included)
• Available in specific license size increments
• Cisco ASA Software Release 8.2 and later
• Same capabilities as single-device license, but SSL user count may be shared among any number of internally connected devices that have an installed participant license.
• ASA-VPNS-XX= (Main server)
• ASA-VPNP-55XX= (Participant license required for additional devices)

AnyConnect Essentials

• All ASA models (5505 to 5580)
• Cisco ASA Software Release 8.2 and later
• AnyConnect tunneling without clientless SSL VPN and Cisco Secure Desktop capabilities.
• Full Tunneling access to Enterprise applications.
• ASA-AC-E-55XX=

AnyConnect Mobile

• All ASA models (5505 to 5580)
• Cisco ASA Software Release 8.0.4 and later
• Enables Mobile OS platform compatibility.
• Required per-device in addition to Essentials or Premium licenses.
• ASA-AC-M-55XX=

Advanced Endpoint Assessment

• All ASA models (5505 to 5580)
• Cisco ASA Software Release 8.0.3 and later
• Enables advanced endpoint assessment capabilities (such as auto-remediation).
• Required per-device in addition to Premium licenses. Not available for Essentials.
• ASA-ADV-END-SEC=

Electronic License Delivery (eDelivery)

Most licenses are available for electronic delivery; this significantly speeds up license fulfillment time. To order a license electronically, be sure to order part number(s) that begin with "L-."