Solved

User licensing on Cisco ASA5505

Posted on 2009-06-30
2
339 Views
Last Modified: 2012-05-07
From Cisco product description:

"Cisco ASA 5505 10 User Firewall Edition Bundle
Includes: 10 users, 8-port Fast Ethernet switch with 2 Power over Ethernet ports, 10 IPsec VPN peers, 2 SSL VPN peers, Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) license"

What exactly does the "10 user" license give you?
0
Comment
Question by:mmurraynet
2 Comments
 
LVL 18

Accepted Solution

by:
simsjrg earned 500 total points
ID: 24747738
That gets you 10 internal users/devices that will be able to get from the internal network out.

So if you have 13 users in your office and they all try to get to a website the first 10 people will be okay and every user after that will not be able to get out.
0
 
LVL 10

Expert Comment

by:stsonline
ID: 24748947
Actually, it's 10 concurrent connections through the firewall - Cisco's licensing allows an unlimited number of internal users, but the license count is impacted by the number of connections through the firewall. For example, if you have a web server on the inside that has a NAT/PAT so a public (outside) user can access it, you have to allow for one 'seat' for those connections. The best way to look at it is to determine how many unique connections will need to be allowed through the firewall, then anything above that will be open for inside to outside connectivity.

Example: you have one web server, one mail server, and one FTP server with public access - that's three (3) 'seats', so you have (10-3) seven (7) licenses available for browsing the web, pulling email, etc.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question