AnyConnect Licensing on the MX Appliance
Click 日本語 for Japanese
AnyConnect licensing FAQ
Cisco offers three license tiers: Secure Client Advantage (formerly Plus), Secure Client Premier (formerly Apex), and Secure Client VPN Only. License costs vary based on license type, duration, and user count.
AnyConnect configuration guide
How does AnyConnect licensing work with the Meraki MX/vMX appliance?
Customers are expected to have a valid AnyConnect license to use AnyConnect with the MX Appliance. Customers are not required to validate their licenses via the Meraki MX or the dashboard. Customers will only be required to accept terms and conditions of use before they can enable AnyConnect. If you are already using AnyConnect or setting it up for the first time, there will be a dashboard notification to accept the terms and conditions of use. There will be no disruption of the AnyConnect service for active networks.
While customers are not required to validate licenses via the Meraki MX or the dashboard, a valid AnyConnect license is required to receive support from Cisco TAC regarding AnyConnect software. For more detailed information, please refer to this document.
Which licenses can I buy?
The Secure Client Advantage (formerly Plus license) L-AC-PLS-LIC=, Secure Client Premier (formerly Apex license) L-AC-APX-LIC= and Secure Client VPN Only license L-AC-VPNO= will suffice. Currently, the only Secure Client Premier (formerly Apex license) feature supported on the MX is SAML authentication. For customers needing more information around purchasing an AnyConnect license, see the AnyConnect Ordering Guide and additional FAQ
How do I determine how many AnyConnect licenses to purchase?
The Secure Client Advantage (formerly Plus license) L-AC-PLS-LIC= and Secure Client Premier (formerly Apex license) L-AC-APX-LIC= models are based on the total number of authorized users that will use the AnyConnect service, not simultaneous connections (either on a per-ASA or shared basis), not total active remote access users. If you have 500 users authorized to use the VPN, you should buy licenses for 500 users.
What if I already have an active AnyConnect license?
If you are an existing Secure Client Advantage (formerly Plus license) L-AC-PLS-LIC=, Secure Client Premier (formerly Apex license) L-AC-APX-LIC= and Secure Client VPN Only license L-AC-VPNO=, you can use AnyConnect on the Meraki MX appliance. This could be a termed or perpetual license.
Which license will be honored?
See table below. Please note that irrespective of the license used, the features useable will be limited to features supported on the Meraki MX appliance. See ASA vs. MX documentation.
License |
Validity |
SKU |
Meraki MX |
Advantage (formerly Plus) subscription |
Expires |
L-AC-PLS-LIC= |
Yes |
Advantage (formerly Plus) perpetual |
Does not expire |
L-AC-PLS-P-G |
Yes |
Premier (formerly Apex) subscription |
Expires |
L-AC-APX-LIC= |
Yes |
VPN Only |
Does not expire |
L-AC-VPNO-xxxx= |
Yes |
How much does the AnyConnect license cost?
License costs vary based on license type, duration, and user count. To get an accurate quote, we recommend contacting a Cisco reseller. You can easily find a Cisco Partner through the Find a Cisco Partner tool.
How do I apply my AnyConnect licenses on my Meraki MX?
Customers are only required to accept terms and conditions of use on the Meraki dashboard after purchasing an AnyConnect license in order to apply it on the MX. There is no linkage of AnyConnect licenses or Smart Accounts to the Meraki Dashboard or MX Appliance.
Why should I buy an AnyConnect license if I cannot link it to my Dashboard or MX Appliance?
- To abide by the license agreement
- To access software.cisco.com for latest client downloads, etc.
- To access to Cisco Technical Assistance Center
Do I need to generate a token to activate my AnyConnect license on the MX?
No, the MX Appliance/dashboard does not support license activation with tokens.
Will my licenses co-term with Meraki dashboard licenses?
No, your AnyConnect license expiry date will not affect or be affected by the co-term date of the Meraki dashboard.
Which Meraki license is required in addition to my AnyConnect license?
An Enterprise, Advanced Security, or SD-WAN+ license can be used with AnyConnect.
Are there any caveats with AnyConnect licenses on the Meraki MX?
Irrespective of the type of AnyConnect license linked, you will be limited to the features available on the Meraki MX appliance. See ASA vs. MX documentation