Cisco ASA Series Cli Configuration Manual page 181

Chapter 1 Managing Feature Licenses
Table 1-16 License Notes (continued)
License
AnyConnect for Mobile
AnyConnect Premium
AnyConnect Premium
Shared
Botnet Traffic Filter
Encryption
Failover, Active/Active
Notes
This license provides access to the AnyConnect Client for touch-screen mobile devices running
Windows Mobile 5.0, 6.0, and 6.1. We recommend using this license if you want to support
mobile access to AnyConnect 2.3 and later versions. This license requires activation of one of the
following licenses to specify the total number of SSL VPN sessions permitted: AnyConnect
Essentials or AnyConnect Premium.
Mobile Posture Support
Enforcing remote access controls and gathering posture data from mobile devices requires an
AnyConnect Mobile license and either an AnyConnect Essentials or AnyConnect Premium
license to be installed on the ASA. Here is the functionality you receive based on the license you
install.
•
AnyConnect Premium License Functionality
–
Enforce DAP policies on supported mobile devices based on DAP attributes and any
other existing endpoint attributes. This includes allowing or denying remote access from
a mobile device.
•
AnyConnect Essentials License Functionality
–
Enable or disable mobile device access on a per group basis and to configure that feature
using ASDM.
–
Display information about connected mobile devices via CLI or ASDM without having
the ability to enforce DAP policies or deny or allow remote access to those mobile
devices.
AnyConnect Premium sessions include the following VPN types:
•
SSL VPN
•
Clientless SSL VPN
•
IPsec remote access VPN using IKEv2
A shared license lets the ASA act as a shared license server for multiple client ASAs. The shared
license pool is large, but the maximum number of sessions used by each individual ASA cannot
exceed the maximum number listed for permanent licenses.
Requires a Strong Encryption (3DES/AES) License to download the dynamic database.
The DES license cannot be disabled. If you have the 3DES license installed, DES is still available.
To prevent the use of DES when you want to only use strong encryption, be sure to configure any
relevant commands to use only strong encryption.
You cannot use Active/Active failover and VPN; if you want to use VPN, use Active/Standby
failover.
Supported Feature Licenses Per Model
Cisco ASA Series CLI Configuration Guide
1-19