Cisco Cisco AnyConnect Secure Mobility Client v2.x Technical Manual

AnyConnect Secure Mobility Client 3.1.08009

●

The securityk9 feature set is required to use the SSLVPN features, regardless of which IOS
version is used.

●

IOS 12.x - the SSLVPN feature is integrated into all 12.x images that start with 12.4(6)T which
have at least a security license (ie. advsecurityk9, adventerprisek9, and so on).

●

IOS 15.0 - earlier versions require an LIC file to be installed on the router which will allow for
10, 25, or 100 user connections. Right to Use* licenses were implemented in 15.0(1)M4

●

IOS 15.1 - earlier versions require an LIC file to be installed on the router which will allow for
10, 25, or 100 user connections. Right to Use* licenses were implemented in 15.1(1)T2,
15.1(2)T2, 15.1(3)T, and 15.1(4)M1

●

IOS 15.2 - all 15.2 versions offer Right to Use* licenses for SSLVPN

●

IOS 15.3 and beyond - earlier versions offer Right to Use* licenses. Starting in 15.3(3)M, the
SSLVPN feature is available after you boot into a securityk9 technology-package

●

For RTU licensing, an evaluation license will be enabled when the first webvpn feature is
configured (that is, webvpn gateway GATEWAY1) and the End User License Agreement
(EULA) has been accepted. After 60 days, this evaluation license becomes a permanent license.
These licenses are honor based and require a paper license to be purchased in order to use the
feature. Additionally, rather than being limited to a certain number of uses, the RTU allow for the
maximum number of simultaneous connections which the router platform can support
concurrently.

These bugs IDs resulted in significant features or fixes for AnyConnect:

: Added support for AnyConnect 3.x to IOS

●

●

The first step when AnyConnect is configured on an IOS Router headend is to confirm that the
license has been correctly installed (if applicable) and enabled. Refer to the licensing information
in the previous section for the licensing specifics on different versions. It depends on the version of
code and platform whether show license lists an SSL_VPN or securityk9 license. Regardless of
the version and license, the EULA will need to be accepted and the license will show as Active.

To upload an AnyConnect image to the VPN headend serves two purposes. Firstly, only operating
systems which have AnyConnect images present on the AnyConnect headend will be permitted to
connect. For example, Windows clients require a Windows package to be installed on the
headend, Linux 64-bit clients require a Linux 64-bit package, and so on. Secondly, the