What does ASA5506-SEC-BUN-K9 ASA 5506 with FirePOWER services and Sec Plus license include ?

ACHAL KRISHNA · ‎01-14-2017

Does the Sec Plus license include these three subscriptions ( IP, AMP, URL Filter) ?

Also can thee license L-ASA5506-SEC-PL ASA 5506 Security Plus - be applied to any of these ASA PART#s: ASA5506W-A-K9 or ASA5506-X or ASA5506H ?

Thanks!

Rahul Govindan · ‎01-15-2017

No, the security plus does not include the Firepower license. You need a separate license for the IPS, AMP and URL licenses. The part number for all 3 features should be: L-ASA5506-TAMC=.

The security plus license is only required on the 5506-X and the 5506H-X. The 5506H-X already has 30 VLANs and Active/Standby Failover features that the Security plus enables.

intersectech · ‎08-27-2019

Hi, I would like to ask if ASA5506-SEC-BUN-K9 always includes the perpetual license for APEX VPN technology, or it can change from the sales region.

Which command ("show version" for example) is used to see if APEX Vpn is active?
What output should I expect?
I would also like to know if the EOL date of the ASA5506 appliances with ASA software is already known.

Thank you

========Firewall Output========

ciscoasa# sh ver

Cisco Adaptive Security Appliance Software Version 9.9(2)

Firepower Extensible Operating System Version 2.3(1.84)

Device Manager Version 7.10(1)

Compiled on Sun 25-Mar-18 17:29 PDT by builders

System image file is "disk0:/asa992-lfbff-k8.SPA"

Config file at boot was "startup-config"

ciscoasa up 6 days 2 hours

Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)

Internal ATA Compact Flash, 8000MB

BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)

Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is xxxx.xxxx.1064, irq 255

2: Ext: GigabitEthernet1/2 : address is xxxx.xxxx.1065, irq 255

3: Ext: GigabitEthernet1/3 : address is xxxx.xxxx.1066, irq 255

4: Ext: GigabitEthernet1/4 : address is xxxx.xxxx.1067, irq 255

5: Ext: GigabitEthernet1/5 : address is xxxx.xxxx.1068, irq 255

6: Ext: GigabitEthernet1/6 : address is xxxx.xxxx.1069, irq 255

7: Ext: GigabitEthernet1/7 : address is xxxx.xxxx.106a, irq 255

8: Ext: GigabitEthernet1/8 : address is xxxx.xxxx.106b, irq 255

9: Int: Internal-Data1/1 : address is xxxx.xxxx.1063, irq 255

10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0

11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0

12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0

13: Ext: Management1/1 : address is xxxx.xxxx.1063, irq 0

14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited perpetual

Maximum VLANs : 30 perpetual

Inside Hosts : Unlimited perpetual

Failover : Active/Standby perpetual

Encryption-DES : Enabled perpetual

Encryption-3DES-AES : Enabled perpetual

Carrier : Disabled perpetual

AnyConnect Premium Peers : 50 perpetual

AnyConnect Essentials : 50 perpetual

Other VPN Peers : 50 perpetual

Total VPN Peers : 50 perpetual

AnyConnect for Mobile : Enabled perpetual

AnyConnect for Cisco VPN Phone : Enabled perpetual

Advanced Endpoint Assessment : Enabled perpetual

Shared License : Enabled perpetual

Total TLS Proxy Sessions : 100 perpetual

Botnet Traffic Filter : Enabled perpetual

Cluster : Disabled perpetual

This platform has an ASA 5506 Security Plus license.

Serial Number: XXXXXXXXX

Running Permanent Activation Key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Configuration register is 0x1

Image type : Release

Key Version : A

Configuration has not been modified since last system restart.

Marvin Rhoads · ‎08-27-2019

Please don't double post the same question.

Answered here:

https://community.cisco.com/t5/firewalls/cisco-asa-5506-x-vpn-license/m-p/3300237