License Notes - Cisco ASA 5505 Configuration Manual

Chapter 4 Managing Feature Licenses

License Notes

Table 4-7
page
Table 4-7 License Notes
License
Active/Active Failover
AnyConnect Essentials
AnyConnect Mobile
AnyConnect Premium
SSL VPN Edition Shared
Botnet Traffic Filter
Combined IPSec and SSL
VPN sessions
OL-20339-01
includes common footnotes shared by multiple tables in the
4-2.
Notes
You cannot use Active/Active failover and VPN; if you want to use VPN, use Active/Standby
failover.
This license enables AnyConnect VPN client access to the adaptive security appliance. This
license does not support browser-based (clientless) SSL VPN access or Cisco Secure Desktop.
For these features, activate an AnyConnect Premium SSL VPN Edition license instead of the
AnyConnect Essentials license.
With the AnyConnect Essentials license, VPN users can use a Web browser to log in, and
Note
download and start (WebLaunch) the AnyConnect client.
The AnyConnect client software offers the same set of client features, whether it is enabled by
this license or an AnyConnect Premium SSL VPN Edition license.
The AnyConnect Essentials license cannot be active at the same time as the following licenses on
a given adaptive security appliance: AnyConnect Premium SSL VPN Edition license (all types)
or the Advanced Endpoint Assessment license. You can, however, run AnyConnect Essentials
and AnyConnect Premium SSL VPN Edition licenses on different adaptive security appliances in
the same network.
By default, the adaptive security appliance uses the AnyConnect Essentials license, but you can
disable it to use other licenses by using theConfiguration > Remote Access VPN > Network
(Client) Access > Advanced > AnyConnect Essentials pane.
See also the "VPN License and Feature Compatibility" section on page
This license provides access to the AnyConnect Client for touch-screen mobile devices running
Windows Mobile 5.0, 6.0, and 6.1. We recommend using this license if you want to support
mobile access to AnyConnect 2.3 and later versions. This license requires activation of one of the
following licenses to specify the total number of SSL VPN sessions permitted: AnyConnect
Essentials or AnyConnect Premium SSL VPN Edition.
A shared license lets the adaptive security appliance act as a shared license server for multiple
client adaptive security appliances. The shared license pool is large, but the maximum number of
sessions used by each individual adaptive security appliance cannot exceed the maximum number
listed for permanent licenses.
Requires a Strong Encryption (3DES/AES) License to download the dynamic database.
Although the maximum IPSec and SSL VPN sessions add up to more than the maximum VPN
•
sessions, the combined sessions should not exceed the VPN session limit. If you exceed the
maximum VPN sessions, you can overload the adaptive security appliance, so be sure to size
your network appropriately.
If you start a clientless SSL VPN session and then start an AnyConnect client session from
•
the portal, 1 session is used in total. However, if you start the AnyConnect client first (from
a standalone client, for example) and then log into the clientless SSL VPN portal, then 2
sessions are used.
Supported Feature Licenses Per Model
"Licenses Per Model" section on
Cisco ASA 5500 Series Configuration Guide using ASDM
4-11.
4-9