ASA 5510 failover + SSL VPN licences

Unanswered Question
Feb 26th, 2008

hi everyone,

having two ASA 5510 configured in active/standby failover, do i have to buy ssl vpn licences to both devices to extend capabilities? what if i change it to active/active? license in question is ASA5500-SSL-25=. thanks!


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tomranson Thu, 02/28/2008 - 03:38

Hi all,

I too am looking for an answer to this; running 2x 5520's in A/S and looking to purchase 750 SSL VPN licenses for the failover cluster.

Do we indeed need to purchase licenses for BOTH pieces of hardware, given that they are in a f/o pair?

Many thanks,


cdusio Thu, 02/28/2008 - 16:09

Yes you need the licenses for both. As far as active active goes that requires multiple context mode to work. I know that multiple context mode doesn't support VPN failover so just keep that in mind.

Also active active failover is not supported on the 5510 only active standby.



lenpet_hun Fri, 02/29/2008 - 02:47

hi Chris,

thanks for your answer! so a/a failover is not an option anymore... but even in a/s, having to buy twice the amount of licences we need is a bit of a rip off. are you absolutely sure we need to have the extra license for both devices?


This Discussion