We are a tiny company with an MX64. I want to enable 5 remote workers to use AnyConnect to establish a VPN. What license do I need to purchase to make this work?
The license is based on the honor system and main value is it enabled you to engage Cisco AnyConnect support. We purchased 3YR licenses and they are tiered by how many users you purchase, our PN was L-AC-PLS-3Y-S3. Take a look at L-AC-PLS-3Y-S1
Just want to add: If you don’t want to pay for licensing, you can also still use L2TP Client VPN at no additional cost.
You need to purchase a minimum of 10 Anyconnect licenses in order to use it with Meraki. There are three different AnyConnect licenses that you’ll need to decide what to get.
You can talk to your VAR to determine what license you’ll need
I don’t know what OP’s requirements are, but our last pen test came back yeeting on the L2TP Client VPN Meraki has. So we moved off it. It gave a low-medium score of it being exploited for a man in the middle type of attack for any traffic that might be unencrypted. A lot of maybes and mights. But because it showed up on the pen test. We dropped it and use the AnyConnect now.
10? Last time we talked to distro we were told a minimum Qty of 25! That was a year+ ago though, and might just be our distributor?
It gave a low-medium score of it being exploited for a man in the middle type of attack for any traffic that might be unencrypted
Interesting, I wouldn’t think anything of importance would be unencrypted since it uses a pre-shared key. I’d assume that there’s perhaps an unencrypted handshake to establish the connection but that’s it. The key wouldn’t be transmitted either. That said I wouldn’t expect L2TP to be the pinnacle of secure VPN connections in any case.
We paired the L2TP with DUO MFA a few years back.
The minimum is definitely 25 for the licenses that support AnyConnect (now called Cisco Secure Client).