• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2057
  • Last Modified:

ASA 5501 - Security Bundle License - how many concurrent users can access the internet?

I have a ASA 5501 with the Security Bundle License...  How many concurrent users can access the internet?  I'm running ASA version 8.0.3 and ASDM 6.2.  
0
gopher_49
Asked:
gopher_49
  • 5
  • 3
2 Solutions
 
raptorjb007Commented:
ASA5505 max concurrent connections without S+ license is 10000

Source:
Cisco ASA 5500 Series Adaptive Security Appliances Models Comparison
http://cisco.com/en/US/products/ps6120/prod_models_comparison.html
0
 
gopher_49Author Commented:
Does this stand true for hosts on the inside interface accessing the internet?
0
 
raptorjb007Commented:
Connection count and hosts count are two separate entities. Each host can open many connections, however depending on your license you may be limited to 10, 50, or unlimited hosts. Host count is determined by the number of internal devices that have an open connection to the outside interface. You can enter the "show local" command to get an accurate report on the number of hosts currently with an open connection.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
gopher_49Author Commented:
gotcha...  I didn't purchase an additional license for concurrent connection counts...  I'm assuming I have a 10 concurrent license..  

I have another question that pertains to the subnet on the inside interface...  I can open a new question if needed...  The inside interface address is 10.0.0.1 255.255.255.0 (this was preconfigured on the old firewall).  When creating the nat (inside) 1 10.0.0.0 255.255.255.0 rule I originally entered in nat (inside) 1 10.0.0.1 255.255.255.0 .  It stripped the '1' off of 10.0.0.1.  It mentioned that the IP address and subnet was inconsistent...  Will this still work?
0
 
btassureCommented:
If you do a show version it should tell you how many hosts you can have there. Otherwise it will tell you in "About-> About ASA" in ASDM and also from the system dashboard.
0
 
gopher_49Author Commented:
btassure,

the show version commmand show a total of 'unlimited' for inside hosts, however, to my knowledge that only pertains to the number of host connected to the switch.  This does not pertain to concurrent hosts to access the internet from the inside interface through the specified route.  The about asa menu shows the same information that the 'show version' command does...  I'm still not 100% sure to how many concurrent users can access the internet....  By default I think it's 10, however, the version 8 ASA os doesn't state this on the release notes....  
0
 
raptorjb007Commented:
In the show version command you should see an output as listed below. The "Inside Hosts" line is what describes the number of licensed hosts. This number will be 10,50, or unlimited. If unlimited there is no practical host limit other than the number connections licensed or that the hardware can handle. As explained, the inside host count is calculated based on the number of hosts on the interface connection with an active connection to the outside interface. If you have 30 computers, up to 10 can access the internet at any one time, the others would be unable to establish a connection until one of the 10 host slots are freed.
Licensed features for this platform:
Maximum Physical Interfaces  : 8
VLANs                        : 3, DMZ Restricted
Inside Hosts                 : 10
Failover                     : Disabled
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
VPN Peers                    : 10
WebVPN Peers                 : 2
Dual ISPs                    : Disabled
VLAN Trunk Ports             : 0
AnyConnect for Mobile        : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
 
This platform has a Base license.

Open in new window

0
 
gopher_49Author Commented:
I'm showing unlimited for the number of inside hosts....  I guess I'm good to go then...  When I purchased this 5505 they had a promotion on the security bundle that gave me extra VPN connections and other security interface options..   I think one being the ability to create virtual interfaces...  Anyway, I guess I'm good to go then...  My concern was that I have 15 hosts that will be accessing the internet at all times...  I was worried that if I delopyed it I would have problems with connectivity due to licensing..  If you're sure that the inside hosts represents how many inside hosts can access the internet then I'm good to go....

Thanks!
0
 
gopher_49Author Commented:
I spit the points for the first solution sent me in the right direction and made me understand how the licensing works and the second solution proved it and clarified it for me.  Thanks for the great support...
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now