Forum Discussion

Effiver's avatar
Effiver
Icon for Nimbostratus rankNimbostratus
Apr 30, 2021

APM: VPN + Azure AD MFA, what license?

Hey,

 

i am new to the F5 universum and i have a question regarding licensing:

When using Remote Access SSL VPN in combination with Azure AD for MFA via SAML, what kind of license is needed in such cases?

I would assume its one CCU per Connection? - what about those access sessions?

 

Maybe someone could help me out on this,

Thanks in advance :)

access session
application delivery
BIG-IP Access Policy Manager (APM)
ccu
license
ssl vpn
vpn
  • AlexBCT's avatar
    AlexBCT
    Icon for Cumulonimbus rankCumulonimbus
    May 02, 2021

    I'm not an expert in licensing (and I've spent enough time in presales to not want to be one either ;), but as far as I understand it, any normal SAML connections does NOT take up a CCU (either when using APM as SAML IdP or SP). However, if you then set up a VPN tunnel, or have other objects on your webtop that DO use a CCU (even if you're not using those), it still costs a CCU.

     

    See here for more details: https://support.f5.com/csp/article/K13267

     

    Hope this helps, but I'm sure there's some better license experts around here so I'm happy to be corrected. ;)