4-10
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 4 Managing Feature Licenses
Supported Feature Licenses Per Model
Intercompany Media
Engine
When you enable the Intercompany Media Engine (IME) license, you can use TLS proxy sessions
up to the platform limit. If you also install the Unified Communications (UC) license, then the
sessions available for UC are also available for IME sessions. For example, if the platform limit
is 1000 TLS proxy sessions, and you purchase a 750-session UC license, then the first 250 IME
sessions do not affect the sessions available for UC. If you need more than 250 sessions for IME,
then the remaining 750 sessions of the platform limit are used on a first-come, first-served basis
by UC and IME.
• For a license part number ending in “K8”, TLS proxy sessions are limited to 1000.
Note For a license part number ending in “K9”, the TLS proxy limit depends on your
configuration and the platform model. To configure the TLS proxy limit, use the
Configuration > Firewall > Unified Communications > TLS Proxy pane.K8 and K9 refer
to whether the license is restricted for export: K8 is unrestricted, and K9 is restricted.
You might also use SRTP encryption sessions for your connections:
• For a K8 license, SRTP sessions are limited to 250.
• For a K9 license, there is not limit.
Note Only calls that require encryption/decryption for media are counted towards the SRTP
limit; if passthrough is set for the call, even if both legs are SRTP, they do not count
towards the limit.
Unified Communications
Proxy sessions
Phone Proxy, Presence Federation Proxy, and Encrypted Voice Inspection applications use TLS
proxy sessions for their connections. Each TLS proxy session is counted against the UC license
limit. All of these applications are licensed under the UC Proxy umbrella, and can be mixed and
matched. Some applications might use multiple sessions for a connection. For example, if you
configure a phone with a primary and backup Cisco Unified Communications Manager, there are
2 TLS proxy connections, so 2 UC Proxy sessions are used.
Note Mobility Advantage Proxy does not require a license, and its TLS proxy sessions do not
count towards the UC license limit.
The maximum number of UC sessions you can use also depends on the TLS proxy session limit:
• For license part numbers ending in “K8” (for example, licenses under 250 users), TLS proxy
sessions are limited to 1000.
Note For license part numbers ending in “K9” (for example, licenses 250 users or larger), the
TLS proxy limit depends on your configuration and the platform model. To configure the
TLS proxy limit, use the Configuration > Firewall > Unified Communications > TLS
Proxy pane.Note: K8 and K9 refer to whether the license is restricted for export: K8 is
unrestricted, and K9 is restricted.
You might also use SRTP encryption sessions for your connections:
• For K8 licenses, SRTP sessions are limited to 250.
• For K9 licenses, there is not limit.
Note Only calls that require encryption/decryption for media are counted towards the SRTP
limit; if passthrough is set for the call, even if both legs are SRTP, they do not count
towards the limit.
VPN load balancing Requires a Strong Encryption (3DES/AES) License.
Table 4-7 License Notes (continued)
License Notes
To Next Page
Loading...
Need help?
General
