Cisco Cisco AnyConnect Secure Mobility Client v3.x
AnyConnect Secure Mobility Client Features, Licenses, and OSs, Release 3.1
License Options
3
—
Cisco Secure Desktop: For both browser-based and AnyConnect sessions.
—
Post Log-in Always-on VPN: Establishes a VPN session automatically after the user logs in to a computer.
This feature also includes a Connect Failure policy and Captive Portal Hotspot Detection and Remediation.
This feature also includes a Connect Failure policy and Captive Portal Hotspot Detection and Remediation.
Note
You can also enable always-on by activating a Cisco Secure Mobility for AnyConnect license on the
WSA with an AnyConnect Essentials license on the ASA.
WSA with an AnyConnect Essentials license on the ASA.
—
Endpoint assessment: Ensures that your choice of antivirus software versions, antispyware versions,
associated update definitions, firewall software versions, and corporate property verification checks
comply with policies to qualify a session to be granted access to the VPN.
associated update definitions, firewall software versions, and corporate property verification checks
comply with policies to qualify a session to be granted access to the VPN.
Endpoint remediation requires an Advanced Endpoint Assessment License in addition to the AnyConnect
Premium License as described below.
Premium License as described below.
—
Quarantine: Uses Dynamic Access Policies to quarantine non-compliant AnyConnect users. You can notify
users with a custom message.
users with a custom message.
Neither the AnyConnect Essentials or Premium license is required for:
—
The Network Access Manager module. It is licensed without charge for use with Cisco wireless access
points, wireless LAN controllers, switches, and RADIUS servers. A current SmartNet contract is required
on the related Cisco equipment.
points, wireless LAN controllers, switches, and RADIUS servers. A current SmartNet contract is required
on the related Cisco equipment.
—
The DART module and Customer Feedback function.
AnyConnect Mobile License
The activation of an AnyConnect Mobile license on the ASA supports mobile access but does not provide support
for AnyConnect features. This option is available with either an AnyConnect Essentials or an AnyConnect Premium
license.
for AnyConnect features. This option is available with either an AnyConnect Essentials or an AnyConnect Premium
license.
AnyConnect 3.1 does not currently support mobile devices. You must activate this license on the ASA if you expect
connectivity from Android or Apple iOS devices running older versions of AnyConnect.
connectivity from Android or Apple iOS devices running older versions of AnyConnect.
AnyConnect Flex License
An AnyConnect Flex license provides business continuity support for licensed features only. Business continuity
increases the number of licensed remote access VPN sessions to prepare for temporary spikes in usage during
cataclysmic events such as pandemics. Each Flex license is ASA-specific and provides support for sixty days. The
count can consist of both contiguous and noncontiguous days.
increases the number of licensed remote access VPN sessions to prepare for temporary spikes in usage during
cataclysmic events such as pandemics. Each Flex license is ASA-specific and provides support for sixty days. The
count can consist of both contiguous and noncontiguous days.
Advanced Endpoint Assessment License
You must activate an Advanced Endpoint Assessment license in conjunction with an AnyConnect Premium license.
It allows the initiation of endpoint remediation.
It allows the initiation of endpoint remediation.
Endpoint remediation is initiated when a connection has been disallowed by Dynamic Access Policies (DAPs) on
the ASA. Endpoint remediation attempts to remediate various aspects of antivirus, antispyware, and personal
firewall protection on the endpoint, only if that software allows a separate application to initiate remediation. If the
endpoint remediation is successful, DAP allows a subsequent connection.
the ASA. Endpoint remediation attempts to remediate various aspects of antivirus, antispyware, and personal
firewall protection on the endpoint, only if that software allows a separate application to initiate remediation. If the
endpoint remediation is successful, DAP allows a subsequent connection.
Cisco Secure Mobility for AnyConnect License
A Cisco Secure Mobility for AnyConnect license activated on the WSA provides services for browser-based SSL
sessions and AnyConnect VPN sessions such as:
sessions and AnyConnect VPN sessions such as: