The above is based on
50 users who are unique
and 10 concurrent users
The above will give you an idea of the pricing.
Now
Anyconnect Essentials = Anyconnect PLUS
Anyconnect Premium = Anyconnect APEX
This is from Cisco
License
Description
AnyConnect Plus
Supports basic AnyConnect features such as VPN functionality for PC and mobile platforms (AnyConnect and standards-based IPsec IKEv2 software clients), FIPS, basic endpoint context collection, 802.1x Windows supplicant, and web security SSL VPN. Plus licenses are most applicable to environments previously served by the AnyConnect Essentials license and users of ISE posture, Network Access Manager, or Web Security modules.
AnyConnect Apex
Supports all basic AnyConnect Plus features in addition to advanced features such as clientless VPN, VPN posture agent, unified posture agent, Next Generation Encryption/Suite B, all plus services and flex licenses. Apex licenses are most applicable to environments previously served by the AnyConnect Premium, Shared, Flex, and Advanced Endpoint Assessment licenses.
http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/feature/guide/anyconnect40features.html
EOL for the older ones is 31st August 2015.
To add Anyconnect PLUS or Anyconnect APEX use the CCW and add it as a separate line item.
This is no longer under the firewall.
AnyConnect Plus — Supports basic AnyConnect features such as VPN functionality for PC and mobile platforms (AnyConnect and standards-based IPsec Internet Key Exchange version 2 (IKEv2) software clients), Federal Information Processing Standard (FIPS), basic endpoint context collection, 802.1x Windows supplicant, and web security Secure Sockets Layer (SSL) VPN. Plus licenses are most applicable to environments previously served by the AnyConnect Essentials license and users of Cisco Identity Services Engine (ISE) posture, Network Access Manager, or Web Security modules.
AnyConnect Apex — Supports all basic AnyConnect Plus features in addition to advanced features such as clientless VPN, VPN posture agent, unified posture agent, Next Generation Encryption or Suite B, Security Assertion Markup Language (SAML), all plus services and flex licenses. Apex licenses are most applicable to environments previously served by the AnyConnect Premium, Shared, Flex, and Advanced Endpoint Assessment licenses.
VPN Only (Perpetual) — Supports VPN functionality for PC and mobile platforms, clientless (browser-based) VPN termination on Adaptive Security Appliance (ASA), VPN-only compliance and posture agent in conjunction with ASA, FIPS compliance, and next-generation encryption (Suite B) with AnyConnect and third-party IKEv2 VPN clients. VPN only licenses are most applicable to environments wanting to use AnyConnect exclusively for remote access VPN services but with high or unpredictable total user counts. No other AnyConnect function or service (such as Web Security module, Cisco Umbrella Roaming, ISE Posture, Network Visibility module, or Network Access Manager) is available with this licensee.