Secure Client Licences

Cisco Secure Client licenses come in several types depending on the features and services you require:

• Secure Client Advantage License: Supports basic Secure Client features such as VPN functionality for PC and mobile platforms, FIPS compliance, basic endpoint context collection, and 802.1x Windows supplicant.
• Secure Client Premier License: Includes all Advantage features plus advanced capabilities like Network Visibility Module, clientless VPN, VPN posture agent, unified posture agent, Next Generation Encryption/Suite B, SAML, and additional services and flex licenses.
• Secure Client VPN Only License (Perpetual): Supports VPN functionality exclusively for remote access VPN services, including clientless (browser-based) VPN termination on Secure Firewall ASA, VPN-only compliance and posture agent, FIPS compliance, and next-generation encryption. This license does not include other Secure Client functions such as Cisco Umbrella Roaming, ISE Posture, or Network Access Manager.

Licenses are user-based and required per authorized user, not per simultaneous connection. You can mix Advantage and Premier licenses in the same environment, but only one license is needed per user. For remote access VPN, your management center license must allow export-controlled functionality (strong encryption). The Secure Client license must be shared with the Smart Account, and the device must have the appropriate entitlement to deploy remote access VPN configurations. Additionally, Secure Client licenses are used with Cisco Secure Firewall Adaptive Security Appliances (ASA), Integrated Services Routers (ISR), Cloud Services Routers (CSR), Aggregated Services Routers (ASR), and other non-VPN headends such as Cisco Identity Services Engine (ISE).