Secure Client VPN Only part numbers (formerly AnyConnect VPN Only)

What Secure Client VPN Only is

Secure Client VPN Only, formerly AnyConnect VPN Only, is Cisco's licence for organisations that use Secure Client purely for remote access VPN. According to Cisco's Secure Client ordering guide (opens in a new tab), it is bought for one ASA headend and sized by the maximum number of concurrent connections that headend will carry, not by the number of people who might connect. That makes it a good fit when total user numbers are high or hard to predict, for example seasonal staff, students or contractors who connect occasionally.

VPN Only includes:

• Remote access VPN for PCs and mobile devices, including per-application VPN on mobile, Cisco phone VPN and third-party IKEv2 VPN clients
• VPN-only compliance and posture with the Cisco Adaptive Security Appliance
• Next-generation (Suite B) encryption, SAML authentication and FIPS compliance

For the other Secure Client modules, such as the Umbrella roaming module, ISE posture, the Network Visibility Module and Network Access Manager, choose Secure Client Advantage or Premier.

How VPN Only licensing works

• Perpetual: you buy the licence once. A Cisco software support contract (SWSS) gives software access and technical support, and the headend itself also needs its own support contract. We quote both with the licence.
• Per headend: each licence belongs to the headend it is bought for, so a site with two headends needs a licence for each.
• Sized by connections: choose the size for the most simultaneous connections you want to support, within the capacity of the headend. Above 10,000 connections, licences combine: Cisco's example is two L-AC-VPNO-10K= licences for a headend that supports 20,000.
• Replacement hardware: when a covered headend is replaced under Cisco's hardware support, VPN Only licences under an active SWSS contract move to the replacement.
• Delivery: the L-AC-VPNO codes below are spare licences delivered electronically. VPN Only licences ordered as an option with a new appliance are quoted with that hardware.

Cisco also lists a 1,000-connection size; we confirm its code at quote. The table lists the VPN Only codes in Cisco's guide.

Secure Client VPN Only part numbers

Perpetual spare licences for one headend, by concurrent connections. Perpetual licences are bought once and each needs an SWSS support contract; the Route column shows how Cisco lists them.

Part numbers from Cisco Secure Client Ordering Guide (updated 8 September 2026) (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.

VPN Only or Advantage?

VPN Only and the Advantage and Premier licences are separate models: a headend uses one or the other. VPN Only is counted per headend by concurrent connections; Advantage is counted by unique users and one licence covers each user on every headend you run. If you have several headends, a predictable number of staff, or want the Umbrella roaming module, Network Access Manager or posture with ISE, Advantage is usually the simpler licence. If you run one headend for a large, changing population that only needs VPN, VPN Only can be the better fit. Tell us how many people connect and how many at once, and we compare both in the quote. See Secure Client Advantage part numbers.

How we help

Forever Systems, a Cisco Partner, sizes VPN Only against your peak concurrent connections and your headend's capacity, quotes the licence with its SWSS contract, and can configure remote access on the headend. Add the codes to the basket and send your enquiry; we confirm codes, quantities and terms when we quote. See all Cisco Secure Client part numbers, or Contact us for a quote.