• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 357
  • Last Modified:

User licensing on Cisco ASA5505

From Cisco product description:

"Cisco ASA 5505 10 User Firewall Edition Bundle
Includes: 10 users, 8-port Fast Ethernet switch with 2 Power over Ethernet ports, 10 IPsec VPN peers, 2 SSL VPN peers, Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) license"

What exactly does the "10 user" license give you?
1 Solution
That gets you 10 internal users/devices that will be able to get from the internal network out.

So if you have 13 users in your office and they all try to get to a website the first 10 people will be okay and every user after that will not be able to get out.
Actually, it's 10 concurrent connections through the firewall - Cisco's licensing allows an unlimited number of internal users, but the license count is impacted by the number of connections through the firewall. For example, if you have a web server on the inside that has a NAT/PAT so a public (outside) user can access it, you have to allow for one 'seat' for those connections. The best way to look at it is to determine how many unique connections will need to be allowed through the firewall, then anything above that will be open for inside to outside connectivity.

Example: you have one web server, one mail server, and one FTP server with public access - that's three (3) 'seats', so you have (10-3) seven (7) licenses available for browsing the web, pulling email, etc.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now