We purchase a SSL VPN license from Cisco. However, we have two firewall right now, one is testing firewall, one is production. Can we load license into testing firewall and later migrate license to production?
I assume that these are ASA firewalls. Is that correct? Cisco licenses for ASA are issued for a specific device and it is not easy to transfer the license to a different ASA. Depending on what you are testing, the ASA does come with licensing for 2 SSL simultaneous connections. Perhaps this might be sufficient for your testing?
Thanks for your reply. Yes we are testing using 2 license now. What we are trying to do is migrate users from old firewall to new firewall connecting to difference ISP. As IP and VPN softeware running in two firewalls are different, so we want to run parall for few weeks and let users migrate smoothly.
If we want to transfer the license is that possilble? or totally imposible?
I am not authoritative on this but I am pretty sure that Cisco would not just transfer the license but would require that you purchase a separate license. For things like RMA I believe that there is some way to transfer the license. But in this circumstance I believe that they would not transfer the license and would require purchase of a separate license.
Apply your purchased license to your new production ASA and install an evaluation license on your soon-to-be retired ASA. The evaluation license is good for 90 days. If your migration is going to take longer than that, you'll need to purchase another license. As Rick stated, the only way to transfer a license between devices is within an RMA.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...