The AnyConnect Apex license tier provides the following services: Clientless (browser-based) VPN termination on the Cisco Adaptive Security Appliance VPN compliance and posture agent in conjunction with the Cisco Adaptive Security Appliance Unified compliance and posture agent in conjunction with the Cisco Identity Services Engine 1.3 or later Next-generation encryption (Suite B) with AnyConnect and third-party (non-AnyConnect) IKEv2 VPN clients Network Visibility Module ASA multicontext-mode remote access SAML Authentication (new in 4.4 with ASA 9.7.1 or later) All Plus services described abovev. Apex licenses are most applicable to environments previously served by the Cisco AnyConnect Premium, Shared, Flex, and Advanced Endpoint Assessment licenses.