Anyconnect Ordering Guide

2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 13

Cisco AnyConnect

Ordering Guide

March 2015

For further information, questions and comments please contact [email protected]

Ordering Guide


Contents

1. Introduction .......................................................................................................................................................... 3 1.1 Purpose, Audience and Scope ........................................................................................................................ 3 1.2 Orderability and First Customer Shipment (FCS) ............................................................................................ 3

2. Cisco AnyConnect Secure Mobility Client ....................................................................................................... 3

2.1 Servers/Platforms ........................................................................................................................................... 4

3. Cisco AnyConnect Licenses ............................................................................................................................. 4

4. Ordering Information ........................................................................................................................................... 5 4.0.1 Export Classification ................................................................................................................................ 6

4.1 Cisco AnyConnect Plus - Licenses (5, 3, 1 Year Terms or Perpetual) .......................................................... 6

4.1.1 Cisco AnyConnect Plus - Subscription Licenses (5 Year Term Licenses) ............................................. 6



4.1.4 Cisco AnyConnect Plus - Perpetual Licenses ........................................................................................ 8

4.2 Cisco AnyConnect Apex - Licenses (5, 3, 1 Year Terms) ............................................................................. 8

4.2.1 Cisco AnyConnect Apex - Subscription Licenses (5 Year Term Licenses) ............................................ 9

4.2.2 Cisco AnyConnect Apex - Subscription Licenses (3 Year Term Licenses) ............................................ 9

4.2.3 Cisco AnyConnect Apex - Subscription Licenses (1 Year Term Licenses) .......................................... 10

4.3 Cisco AnyConnect Plus Migration Licenses ................................................................................................ 10

4.3.1 Cisco AnyConnect

Plus Migration - Subscription Licenses (5 Year Term Licenses) ............................ 10 4.3.2 Cisco AnyConnect

Plus Migration - Subscription Licenses (3 Year Term Licenses) ........................... 11

4.3.3 Cisco AnyConnect Plus Migration - Subscription Licenses (1 Year Term Licenses) ........................... 11

4.4 Cisco AnyConnect Apex Migration Licenses ............................................................................................... 12

4.4.1 Cisco AnyConnect Apex Migration - Subscription Licenses (3 Year Term Licenses) .......................... 12

5. Service Offerings ............................................................................................................................................... 12

6. License Management ......................................................................................................................................... 13 6.1 Evaluation Licenses ...................................................................................................................................... 13

7. Product Licensing Terms and Conditions ....................................................................................................... 13


1. Introduction

1.1 Purpose, Audience and Scope

This document describes the packaging structure and ordering information for Cisco AnyConnect.

Audience: This guide is for Cisco sales, partners, distributors, and customers.

Scope: This ordering guide covers the following products:

Cisco AnyConnect

For more detailed information on Cisco AnyConnect, go to http://www.cisco.com/go/anyconnect.

1.2 Orderability and First Customer Shipment (FCS)

Orderability for the following Cisco AnyConnect licenses are available beginning in November 2014:

Cisco AnyConnect Plus Subscription Licenses

Cisco AnyConnect Plus Perpetual Licenses

Cisco AnyConnect Apex Subscription Licenses

2. Cisco AnyConnect Secure Mobility Client

The Cisco AnyConnect Secure Mobility Client consistently raises the bar in remote access technology by making

the experience easy for end users but with the security required by IT. The Cisco AnyConnect Secure Mobility

Client provides a secure connectivity experience across a broad set of PC and mobile devices. As mobile workers

roam to different locations, an always-on intelligent VPN enables the Cisco AnyConnect Secure Mobility Client to

automatically resume connectivity and adapt its tunneling protocol to the most efficient method, such as Datagram

Transport Layer Security (DTLS) protocol for latency-sensitive VOIP traffic or TCP-based application access.

Tunneling support is also available for IP security/Internet Key Exchange version 2 (IPsec/IKEv2).

Cisco AnyConnect 4.0 goes well beyond traditional secure access offering a wide range of endpoint security

services and streamlined IT operations all from a single unified agent. Cisco AnyConnect includes enhanced VPN

services by offering customers the ability to achieve tighter security controls while enabling direct, secure, per-

application access to corporate resources via mobile per application VPN services. This minimizes the potential of

other non-approved applications from compromising enterprise network and data.

Cisco AnyConnect also provides robust unified compliance capabilities ensuring that an endpoints compromised

state does not impact the integrity of the corporate network. New in Cisco AnyConnect 4.0 and available in

conjunction with Cisco Identity Service Engine (ISE) 1.3 (with Cisco AnyConnect and Cisco ISE Apex licenses),

Cisco AnyConnect now supports endpoint posture assessment and remediation for wired, wireless and VPN

environments (replacing the Cisco ISE Network Access Control [NAC] agent). Endpoints can be validated for

compliance checking status of various antivirus, personal firewall, or anti-spyware products. Out-of-compliance

endpoints undergo additional system checks or remediation actions. ISE Apex licenses are required in addition to

AnyConnect Apex licenses to enable posture capabilities in Cisco Identity Service Engine (ISE).

Cisco AnyConnect Secure Mobility Solution has built-in web security and malware threat defense, giving you a

choice of using either the premises-based Cisco Web Security Appliance or cloud-based Cisco Cloud Web

Security for reliable and secure employee access to corporate resources. Secure mobility combines web security,

malware threat defense, and remote access for a comprehensive and secure enterprise mobility solution.

Consistent, context-aware security policies ensure a protected and productive work environment.


In addition to industry-leading VPN capabilities, the Cisco AnyConnect Secure Mobility Client enables IEEE 802.1X

capabilities, providing a single authentication framework to manage user and device identity along with the network

access protocols required to move smoothly from wired to wireless networks. Consistent with its VPN functionality,

the Cisco AnyConnect Secure Mobility Client supports IEEE 802.1AE Media Access Control security (MACsec) for

data confidentiality, data integrity, and data origin authentication on wired networks, safeguarding communication

between trusted components of the network.

2.1 Servers/Platforms

Cisco AnyConnect services are used in conjunction with numerous Cisco head server platforms, including but not

limited to the Cisco ASA, Cisco ASAv, Cisco ISE, Cisco IOS

on the Cisco Integrated Services Routers (ISRs)

and Cisco ASR Series, and Cisco Web Security Appliance (CWS). Head-end termination devices and cloud

services and associated service costs and support contracts are purchased separately.

3. Cisco AnyConnect Licenses

Cisco AnyConnect 4.0 offers simplified licensing to meet the needs of the broad enterprise IT community as it

adapts to growing end user mobility demands. Two licensing tiers offer a clear choice based on an enterprises

requirements. The Cisco AnyConnect Plus license provides an array of VPN and security features while the Cisco

AnyConnect Apex license delivers these features plus compliance/posture, clientless VPN, next-generation

encryption, and more.

Cisco AnyConnect Plus Cisco AnyConnect

Apex

Device/System VPN

(including Cisco Phone VPN)

All AnyConnect Plus features plus

Per App VPN

(new in AnyConnect 4.0)

Unified Endpoint Compliance/Remediation (Posture) (new in AnyConnect 4.0)

ISE Apex licenses are required in addition to AnyConnect Apex licenses to enable posture capabilities in Cisco Identity Services Engine (ISE)

Cisco Web Security (CWS & WSA)

Suite B/Next Generation Encryption

Network Access Manager Clientless (browser-based) VPN connectivity

The new Cisco AnyConnect licensing eliminates the need to purchase per head-end simultaneous-connections

licenses and dedicated license servers. It allows mixing of license tiers across a single environment and it shifts

licensing from simultaneous connections to a user-based approach.

Cisco AnyConnect Plus and Apex licenses are available as one-, three-, and five-year subscriptions while Plus

licenses are also available as Perpetual licenses. Software application support plus upgrades subscription is

included during the duration of the subscription licenses and must be purchased separately for Plus Perpetual

licenses. An active contract is required for all software access and technical support. Support contracts for the

head-end termination devices must be purchased separately.

Migration license options are available for existing AnyConnect Premium/Shared Premium and Essentials

customers. AnyConnect 4.0 licensed customers are also entitled to earlier AnyConnect releases.


4. Ordering Information

All Cisco AnyConnect licenses are orderable in the Cisco Commerce Workspace (CCW) and are listed on the

global price list (GPL).

To order a Cisco AnyConnect Plus or Apex subscription license on CCW, start by first choosing the service tier and

length of term (L-AC-PLS-xYR-G or L-AC-APX-xYR-G with x being 5, 3 or 1). To order a Cisco AnyConnect Plus

perpetual license, start by first choosing L-AC-PLS-P-G. Next choose Select Options and select the count based

license option(s) based on the total number of possible unique users that will use that tier of Cisco AnyConnect

service. For example, AC-PLS-5YR-1500-S, AC-APX-3YR-10K-S, or AC-PLS-P-100-S. For the term-based

licenses, the pricing will populate after selecting the user count. After selecting your user count(s), a high quantity

expansion SKU in the format of L-AC-yyy-S-xY-zzzz is added at no cost. This SKU enables a multi-use Product

Activation Key (PAK), which can be used to enable ASA VPN services throughout the enterprise. For term based

licenses, a SKU in the format AC-PLS-xYR-zzzz/AC-APX-xYR-zzzz is automatically added to entitle software and

support services and will contain the pricing for your selected term.

Note: Selecting Cisco AnyConnect Plus or Apex license count based options will automatically map to the actual

license and associated cost.

Note: Selecting more than quantity one (1) of the initial service tier and term or of a particular user count will not

result in the generation of additional Product Activation Keys contracts. We recommend leaving this value at 1. If

you are ordering for different customers, each order must be completed separately.

Note: You are allowed to stack user count licenses and terms. Doing so will result in the generation of multiple

Product Activation Keys which should be registered to your ASA. PAK registration does not apply to the ASAv.

Additional user licenses can be purchased at a later time. The remaining term lengths will differ between the user

count licenses when purchased at different times.

To order Cisco AnyConnect Plus or Apex licenses from a Cisco partner, please refer to their Cisco AnyConnect

specific SKU structures for a Plus license (AC-PLS) and Apex license (AC-APX).

The number of Cisco AnyConnect licenses needed is based on all the possible unique users that may use any

Cisco AnyConnect service. The exact number of Plus or Apex licenses should be based on the total number of

unique users that require the specific services associated with each license type.

Cisco AnyConnect Apex licenses include all Plus license functionality so only one type of license is required for

each user.

Cisco AnyConnect Apex and Plus licenses can be mixed in the same environment.

The number of Plus licenses can be smaller or greater than the number of Apex licenses.


Additional information on ordering and a full list of available SKUs are listed below.

4.0.1 Export Classification

Cisco AnyConnect US Export Classification: ECCN: 5D992/Mass Market/Self-classified

4.1 Cisco AnyConnect Plus - Licenses (5, 3, 1 Year Terms or Perpetual)

The Cisco AnyConnect Plus license tier provides the following services:

VPN functionality for PC and mobile platforms, including per-app VPN on mobile platforms and Cisco Phone

VPN

Basic endpoint context collection

IEEE 802.1X Windows supplicant

Cisco Cloud Web Security (CWS) agent for Windows & Mac OS X platforms

Federal Information Processing Standards (FIPS) compliance

Cisco AnyConnect Plus licenses are most applicable in environments previous served by Cisco AnyConnect

Essentials and Mobile including Network Access Manager, Web Security, and Cisco IOS/ASA VPN head-ends.

Term License: L-AC-PLS-xYR-G

Term Subscription: AC-PLS-xYR-zzzz-S

(x= 5, 3, 1) year term

(zzzz= 25, 50, 100, 250, 500, 1K, 1500, 2500, 3500, 5K, 10K, 25K, 50K, 100K, 250K) unique users

Perpetual License: L-AC-PLS-P-G

User License: AC-PLS-P-zzzz-S



4.1.1 Cisco AnyConnect Plus - Subscription Licenses (5 Year Term Licenses)

Term License Term Subscription Description

L-AC-PLS-5YR-G AC-PLS-5YR-25-S Cisco AnyConnect Plus - 5 Year Subscription License/25 users





L-AC-PLS-5YR-G AC-PLS-5YR-1K-S Cisco AnyConnect Plus - 5 Year Subscription License/1,000 users

L-AC-PLS-5YR-G AC-PLS-5YR-1500-S Cisco AnyConnect Plus - 5 Year Subscription License/1,500 users










4.1.4 Cisco AnyConnect Plus - Perpetual Licenses

SASU contract required for software access and technical support for perpetual licenses.

Perpetual License User License Description Cisco SASU SKU

L-AC-PLS-P-G AC-PLS-P-25-S Cisco AnyConnect Plus - Perpetual License/25 users CON-SAU-ACPL25





L-AC-PLS-P-G AC-PLS-P-1K-S Cisco AnyConnect Plus - Perpetual License/1,000 users CON-SAU-ACPL1K

L-AC-PLS-P-G AC-PLS-P-1500-S Cisco AnyConnect Plus - Perpetual License/1,500 users CON-SAU-ACPL1500









4.2 Cisco AnyConnect Apex - Licenses (5, 3, 1 Year Terms)

The Cisco AnyConnect Apex license tier provides the following services:

Clientless (browser-based) VPN termination on the Cisco ASA

VPN Compliance/Posture agent in conjunction with the Cisco ASA

Unified Compliance/Posture agent in conjunction with the Cisco Identity Services Engine (ISE) 1.3 or later

Next Generation Encryption/Suite B

All Plus services described above

Cisco AnyConnect Apex licenses are most applicable to environments previously served by Cisco AnyConnect

Premium, Shared, Flex and Advanced Endpoint Assessment.

Term License: L-AC-APX-xYR-G

Term Subscription: AC-APX-xYR-zzzz-S




4.2.1 Cisco AnyConnect Apex - Subscription Licenses (5 Year Term Licenses)


L-AC-APX-5YR-G AC-APX-5YR-25-S Cisco AnyConnect Apex - 5 Year Subscription License/25 users





L-AC-APX-5YR-G AC-APX-5YR-1K-S Cisco AnyConnect Apex - 5 Year Subscription License/1,000 users

L-AC-APX-5YR-G AC-APX-5YR-1500-S Cisco AnyConnect Apex - 5 Year Subscription License/1,500 users












































4.3 Cisco AnyConnect Plus Migration Licenses

AnyConnect Plus Migration Licenses are available for customers who purchased AnyConnect Essentials

licenses prior to March 2nd

2015. Purchases of any AnyConnect Essentials license subsequent to March 1st 2015

are not eligible to purchase AnyConnect Plus Migration licenses to migrate to AnyConnect 4.0. Customers are

responsible for purchasing standard Plus and/or Apex Licenses at renewal time.

Given the transition from a per headend, concurrent endpoint licensing model to a user-based enterprise

deployment licensing model with AnyConnect 4.0, eligible AnyConnect customers are entitled to pick whatever

user count is needed for their deployment. For additional questions regarding migrations please reach out to your

Cisco or partner sales representative.

Term License: L-AC-PLS-M-xYR-G

Term Subscription: AC-PLSM-xYR-zzzz-S



4.3.1 Cisco AnyConnect

Plus Migration - Subscription Licenses (5 Year Term Licenses)


L-AC-PLS-M-5YR-G AC-PLSM-5YR-25-S Cisco AnyConnect Plus Migration - 5 Year Subscription License/25 users





L-AC-PLS-M-5YR-G AC-PLSM-5YR-1K-S Cisco AnyConnect Plus Migration - 5 Year Subscription License/1,000 users

L-AC-PLS-M-5YR-G AC-PLSM-5YR-1500-S Cisco AnyConnect Plus Migration - 5 Year Subscription License/1,500 users











4.3.2 Cisco AnyConnect Plus Migration - Subscription Licenses (3 Year Term Licenses)

















4.3.3 Cisco AnyConnect Plus Migration - Subscription Licenses (1 Year Term Licenses)


















4.4 Cisco AnyConnect Apex Migration Licenses

AnyConnect

Apex Migration Licenses are available for customers who purchased AnyConnect Premium

and Shared Premium licenses prior to March 2nd

2015. Purchases of any AnyConnect Premium or Shared

Premium license subsequent to March 1st 2015 are not eligible to purchase AnyConnect Apex Migration licenses to

migrate to AnyConnect 4.0. Customers are responsible for purchasing standard Plus and/or Apex Licenses at

renewal time.

Given the transition from a per headend, concurrent endpoint licensing model to a user-based enterprise

deployment licensing model with AnyConnect 4.0, eligible AnyConnect Premium and Shared Premium customers

are entitled to pick whatever user count is needed for their deployment. For additional questions regarding

migrations please reach out to your Cisco or partner sales representative.

Term License: L-AC-APX-M-3YR-G

Term Subscription: AC-APXM-3YR-zzzz-S

Three year term


4.4.1 Cisco AnyConnect Apex Migration - Subscription Licenses (3 Year Term Licenses)


L-AC-APX-M-3YR-G AC-APXM-3YR-25-S Cisco AnyConnect Apex Migration - 3 Year Subscription License/25 users





L-AC-APX-M-3YR-G AC-APXM-3YR-1K-S Cisco AnyConnect Apex Migration - 3 Year Subscription License/1,000 users

L-AC-APX-M-3YR-G AC-APXM-3YR-1500-S Cisco AnyConnect Apex Migration - 3 Year Subscription License/1,500 users









5. Service Offerings

Support and software updates are included for the duration of the all Cisco AnyConnect subscription licenses.

AnyConnect Plus perpetual licenses require the additional purchase of a SASU contract. SMARTnet

support

contracts for the head-end termination devices must be purchased separately.

This support entitles customers to the services listed here for the full term of the purchased software subscription:

Software updates and major upgrades, to keep Cisco AnyConnect performing optimally with the most

current feature set

Access to the Cisco Technical Assistance Center (TAC), which provides fast, specialized support

Registered access to Cisco.com


Please refer to the following link for more detailed information regarding Cisco SASU:

http://www.cisco.com/en/US/services/ps2827/ps2993/services_at_a_glance_sas_sasu.pdf.

6. License Management

Cisco offers a variety of license management tools at the License Management portal. A valid CCO user name and

a password are required to utilize the portal.

When a Cisco ASA is used Cisco AnyConnect, your production activation key(s) (PAKs) for Plus or Apex must be

registered to the serial number of each individual Cisco ASA via the Cisco License Management portal.

Note: It is important to register each ASA individually with a Quantity of one (1) selected in the License

Management Portal. Do NOT select the All Quantity option during registration. You cannot associate more

than one ASA serial number with your PAK at a time. The same Product Activation Key (PAK) should be applied to

all ASAs. If you have purchased multiple license tiers or user counts, register each individually.

Key features of the Cisco License Management portal include:

Simplified asset management: Identifies PAKs registered to a customer and the devices with installed

licenses

Automated software activation: Quickly processes PAK registration and license file distribution

Strong encryption licenses (free of charge). To utilize, select the followings:

Get Other Licenses -> IPS, Crypto, Other -> Security Products -> Cisco ASA 3DES/AES License

6.1 Evaluation Licenses

Cisco offers 4-week Cisco AnyConnect Apex evaluation licenses which incorporate all Plus license functionality.

To obtain an evaluation license, please visit: https://www.cisco.com/go/license.

7. Product Licensing Terms and Conditions

The licensing terms and conditions are listed in the Supplemental End User Agreement (SEULA). The Cisco

AnyConnect privacy policy can be found at: http://www.cisco.com/web/siteassets/legal/privacy.html.

Printed in USA C07-732790-05 03/15

Date post:	04-Nov-2015
Category:	Documents
Upload:	sara-lawrence
View:	138 times
Download:	0 times

Anyconnect Ordering Guide

Documents