Solved

Cisco AnyConnect vs Cisco IPSec VPN

Posted on 2011-02-25
1
1,816 Views
Last Modified: 2012-05-11
I'm considering granting several types of devices (android phones, iphone, ipad, windows 7 laptop, and windows xp laptop) access via our Cisco ASA 5510's. I'm looking at the free IPSec VPN and comparing it to the Cisco AnyConnect VPN. Could you offer your pros and cons to both and is there any functional difference and possible costs?

Here is what I believe or know:
1) AnyConnect has a licensing fee [750 simultaneous AnyConnect users in your environment is $250 (L-ASA-AC-E-5520=) and add another $250 for Mobile (L-ASA-AC-M-5520=)].
2) 4 licenses for IPSec SSL VPN are included with the ASA 5510 Security Plus license
3) AnyConnect Supports more types of devices.
4) AnyConnect is a seamless connection for end users.
0
Comment
Question by:First Last
1 Comment
 
LVL 33

Accepted Solution

by:
MikeKane earned 500 total points
ID: 34983548
The Anyconnect client is SSL over 443 which means that the outbound traffic, being a web port, will automatically get out through home routers, other businesses firewalls, etc...    You don't need to worry about the issues that hamper an ipsec vpn like NAT-T, extra open ports, etc...  

Anyconnect SSL is the only solution if you want to use cisco phone VPNs (you'd also need the vpn phone lic for that).  Anyconnect can be pushed to a client over the webvpn with auto updates as well as start before login.  

IPSEC client is free.   That's a big plus right there if you are up against a budget.    It also does SBL.    




0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now