Cisco ASA 5505 - 10 user license problem


I am configuring a Cisco ASA 5505 with a 10 User license, any way around that?
From what I understand I can only get 10 hosts running traffic.

Can I purchase/upgrade to fix it?

Any suggestions are appreciated.
Who is Participating?
rauenpcConnect With a Mentor Commented:
You can purchase add-on licenses to upgrade the allowable host count.
The only other way around this would be to remove the default gateway from all devices that don't actually need to use the firewall to access the internet or vpn resources. This method is great if you have 8 pc's and 5 printers because you can just remove the gateway on the printers and life is good.

Usually it's best to pony up and purchase a license and avoid the duct-tape network solution where you pick and choose who can touch the firewall and obtain the mystical host licenses.
Contact your Cisco reseller, there are 50 user and unlimited options.

Look at table #1
To upgrade to 50 users the part number is ASA5505-SW-10-50=.

To upgrade to unlimited users the part number is ASA5505-SW-10-UL=.
Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

RandallVillalobosAuthor Commented:
Thank you for the information, based on this I have the following questions:

1. If I have 50 users connecting from an outside/Internet location to my MailServer or Webserver, will it MAX OUT my 10 user license?  Or is the license only for Outbound (lan to internet) connections?

2. If I have a proxy server and a mail server, in good theory, I will only need 2 of the 10 users license.  Is this correct?

I am thinking of only allowing internet access to my PRoxy and my Mail Server, that way I do not need all the licensing.  (Assuming that Inbound-Internet connections do not count)

Reading the following link, it makes me believe that Inbound connections do not count:

Thanks for any suggestions
giltjrConnect With a Mentor Commented:
Are you running in routed mode?  If so:

#1) If you have a web server and a mail server on your internal network that have active connections that would count as "2 users."  Does not matter how many IP addresses on the outside are talking to it.

#2)  Correct, if you only have two devices on the inside that access the Internet or are accessed from the Internet it is only "2 users."

If you are in bridged mode, then the side with the least number of IP address/hosts counts.
RandallVillalobosAuthor Commented:

Newbie do I know if the ASA is on router mode or bridge mode?

I have the Cisco ASA connecting to the internet, behind the firewall I have 1 flat network (LAN)

Thank you!
The asa is in routed mode by default. In transparent mode, the config begins with "firewall transparent "
RandallVillalobosAuthor Commented:
Thank you for all the help
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.