Cisco ASA 5505 Configuration Manual page 126

Asa 5500 series
Hide thumbs Also See for ASA 5505:
Table of Contents

Advertisement

Supported Feature Licenses Per Model
Table 4-7
License Notes (continued)
License
Intercompany Media
Engine
Unified Communications
Proxy sessions
VPN load balancing
Cisco ASA 5500 Series Configuration Guide using ASDM
4-10
Notes
When you enable the Intercompany Media Engine (IME) license, you can use TLS proxy sessions
up to the platform limit. If you also install the Unified Communications (UC) license, then the
sessions available for UC are also available for IME sessions. For example, if the platform limit
is 1000 TLS proxy sessions, and you purchase a 750-session UC license, then the first 250 IME
sessions do not affect the sessions available for UC. If you need more than 250 sessions for IME,
then the remaining 750 sessions of the platform limit are used on a first-come, first-served basis
by UC and IME.
For a license part number ending in "K8", TLS proxy sessions are limited to 1000.
For a license part number ending in "K9", the TLS proxy limit depends on your
Note
configuration and the platform model. To configure the TLS proxy limit, use the
Configuration > Firewall > Unified Communications > TLS Proxy pane.K8 and K9 refer
to whether the license is restricted for export: K8 is unrestricted, and K9 is restricted.
You might also use SRTP encryption sessions for your connections:
For a K8 license, SRTP sessions are limited to 250.
For a K9 license, there is not limit.
Only calls that require encryption/decryption for media are counted towards the SRTP
Note
limit; if passthrough is set for the call, even if both legs are SRTP, they do not count
towards the limit.
Phone Proxy, Presence Federation Proxy, and Encrypted Voice Inspection applications use TLS
proxy sessions for their connections. Each TLS proxy session is counted against the UC license
limit. All of these applications are licensed under the UC Proxy umbrella, and can be mixed and
matched. Some applications might use multiple sessions for a connection. For example, if you
configure a phone with a primary and backup Cisco Unified Communications Manager, there are
2 TLS proxy connections, so 2 UC Proxy sessions are used.
Mobility Advantage Proxy does not require a license, and its TLS proxy sessions do not
Note
count towards the UC license limit.
The maximum number of UC sessions you can use also depends on the TLS proxy session limit:
For license part numbers ending in "K8" (for example, licenses under 250 users), TLS proxy
sessions are limited to 1000.
For license part numbers ending in "K9" (for example, licenses 250 users or larger), the
Note
TLS proxy limit depends on your configuration and the platform model. To configure the
TLS proxy limit, use the Configuration > Firewall > Unified Communications > TLS
Proxy pane.Note: K8 and K9 refer to whether the license is restricted for export: K8 is
unrestricted, and K9 is restricted.
You might also use SRTP encryption sessions for your connections:
For K8 licenses, SRTP sessions are limited to 250.
For K9 licenses, there is not limit.
Only calls that require encryption/decryption for media are counted towards the SRTP
Note
limit; if passthrough is set for the call, even if both legs are SRTP, they do not count
towards the limit.
Requires a Strong Encryption (3DES/AES) License.
Chapter 4
Managing Feature Licenses
OL-20339-01

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Asa 5510Asa 5540Asa 5520Asa 5550Asa 5580

Table of Contents