We have Cisco ASA5500 and we purchased L-AC-PLS-LIC= for 25 users for 3 year now if i want to increase users count then how can i increase it to 50?Can i just buy 25 users license and add into or i have to by brand new 50 users license? (what will happened to my old 25 users license in that case?)Interesting enough when i applied 25 users license, its not showing me anywhere that you have 25 users even it is showing 5000, does that means i have 5000 user limit?
The smp indicates the image is for a multi-core ASA (check how many cores using show ver). The 3rd one is for old ASAs that have a single core. The k8 tag indicates this image supports DES encryption. With a license, you can make the ASA support AES and 3DES. Filed Under: Cisco ASA Firewall Configuration Tagged With: asa 5505 license, asa license, cisco license, upgrade license Download Cisco Commands Cheat Sheets Enter your Email below to Download our Free Cisco Commands Cheat Sheets for Routers, Switches and ASA Firewalls.
This chapter covers the following topics:. Licensed features on ASA. Managing licenses with activation keys. Combined licenses in failover and clustering. Shared Premium AnyConnect VPN licensingASA offers a very comprehensive feature set that helps secure networks of all shapes and sizes.
To deliver the desired functionality within the available budget while allowing for future scalability, you can unlock advanced security capabilities and increase certain system capacities on demand through a flexible system of feature licenses.Some characteristics of the hardware platform or expansion modules can enable certain feature licenses implicitly. You can also activate additional licenses permanently or for a certain duration of time. When multiple Cisco ASA devices participate in failover or clustering, some licensed capacities automatically aggregate up to the platform hardware limit to maximize your investment. Although this flexible system may seem complicated at first, it actually makes the task of customizing a Cisco ASA for your specific business needs quite easy. Licensed Features on ASAEvery Cisco ASA platform comes with a certain number of implicitly activated features and capacities as a part of the Base License.
In other words, these capabilities are fixed in the given software image for the particular hardware; you cannot selectively disable them. One example of such a feature is Active/Active failover, which is always available on all Cisco ASA 5585-X appliances. Some platforms offer the optional Security Plus license, which may unlock additional features or capacities on top of the Base License.
For example, you can increase the maximum concurrent firewall connection count on the Cisco ASA 5505 from 10,000 to 25,000 by installing a Security Plus license.In addition to the Base and Security Plus licenses, you can activate other advanced security features individually:. Some capabilities operate in a simple binary switch fashion whereby the license for the feature type is either enabled or disabled; once enabled, there are typically no direct restrictions on how much the feature can be used. For instance, the Botnet Traffic Filter license will allow you to protect all connections through a Cisco ASA up to the maximum limit for the platform. Other features may carry their own capacity limits that come in quantified tiers. An example of such a feature is the ability to configure security contexts on some Cisco ASA appliances. On the Cisco ASA 5580 platform, the Base License allows creating up to two application contexts, while several premium licenses of different tiered counts allow extending this limit up to 250 contexts in total.Not all of the licensed features and capabilities are available on all hardware platforms.
For instance, at the time of writing, the clustering feature is currently available only on Cisco ASA 5500-X, ASA 5580, and ASA 5585-X appliances. Depending on specific markets and international export regulations, some Cisco ASA models may also ship with the permanent No Payload Encryption license; this license ties to the particular hardware without the option of change or removal.