AnyConnect Premium vs AnyConnect Essentials

Since the Cisco VPN Client is reaching end of life, I'm looking for another solution.  Right now I have thousands of users who use the Cisco VPN Client to connect to their hosted applications.  I would like to go with Cisco AnyConnect, but I'm a little unsure about the licensing.  I see there is AnyConnect Premium and AnyConnect Essentials.  AnyConnect Premium is way out of my budget, but AnyConnect Essentials seems affordable.  I'm looking for someone who has used AnyConnect Essentials.  I have read the documentation, but I'm still unsure how AnyConnect Essentials works.  Do I get to it via a webpage, or do I need to install the client on all machines.  How many AnyConnect Licenses can go on a ASA5510?  I have read Cisco's documentation on AnyConnect, but not using it before I want to be sure that AnyConnect Essentials will do everything that the Cisco VPN Clients does.  Thanks.
LVL 4
denver218Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

John MeggersNetwork ArchitectCommented:
AnyConnect Essentials is basically a replacement for IPSec.  It provides full-tunnel connectivity, so any software runs through it (you're not limited to browser-based applications as with client less). Personally, I've found it to be much more forgiving of fluctuations in network connectivity than IPSec is.  The client can be distributed by a patch management system, or users can install it by using a web browser to go to the ASA and the client is pushed down.  Much easier deployment than IPSec, and the client is maintained as new versions are put into the ASA configuration.  It is not exactly free, as IPSec is, but it's close in the few hundreds of dollars depending on the model of ASA.

There area a few caveats.  First, Essentials is licensed for all the SSL connections a particular ASA model can handle.  So once you've enabled Essentials, any premium licenses are lost because only the Essentials licenses will be used.  That means if you need to provide both a client less and full-tunnel portal, you'll need two ASAs.  Second, Essentials doesn't support clientless VPN, nor does it support any of the CSD-based services such as endpoint assessment, etc.  So if you require any of those features, you will need premium licenses, but those features aren't available with IPSec anyway.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
denver218Author Commented:
Thanks.  Do I have to use an ASA for AnyConnect?  Can I configure a remote access VPN on a Cisco 2800 or 2900 series router and use anyconnect?  The reason I ask is because I have some clients who have 2800 series routers and currently have a remote access VPN configured on them and use the Cisco VPN Client to Connect.  Can I configure a 2800 series router to use AnyConnect?  
0
John MeggersNetwork ArchitectCommented:
Here's a configuration example, so it is clearly supported.  http://www.cisco.com/en/US/products/ps8411/products_configuration_example09186a0080b25941.shtml
0
denver218Author Commented:
Thanks.  I think AnyConnect Essentials will work for me .
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.