AnyConnect 4.x offers simplified licensing to meet the needs of the broad enterprise IT community as it adapts to growing end-user mobility demands. AnyConnect 4.x collapses the formerly complex AnyConnect licensing model into two simple tiers. The first is AnyConnect Plus, which includes basic VPN services such as device and per-application VPN (including third-party IKEv2 remote access VPN headend support), trusted network detection, basic device context collection, and Federal Information Processing Standards (FIPS) compliance. AnyConnect Plus also includes other non-VPN services such as the AnyConnect Network Access Manager 802.1X supplicant, the Cloud Web Security module, and the Cisco Umbrella Roaming module. Existing AnyConnect customers should think of AnyConnect Plus as similar to the previous AnyConnect Essentials. The second offer is AnyConnect Apex, which includes more advanced services such as endpoint posture checks (Hostscan through ASA VPN, or ISE Posture through the Cisco Identity Services Engine), network visibility, next- generation VPN encryption (including Suite B), and clientless remote access VPN as well as all the capabilities of AnyConnect Plus. Existing AnyConnect customers should think of AnyConnect Apex as similar to previous AnyConnect Premium and Premium Shared Licenses. AnyConnect Plus and Apex licenses offer a set of features and deployment flexibility to meet a wide range of your enterprise’s requirements. See Table 1 for details. For enterprises that want only AnyConnect for remote access use cases, there is also the AnyConnect VPN Only license. Please refer to section 4.3 for additional details on VPN Only licenses.
