said by bigsy:Yes, that's correct. On the 14 devices that don't need internet access, you can remove the default gateway and then use the 10-user license said by macallah:
What is the 10 vs 50 license? Is that tunnels or is it 10 IPs through NAT?
For license information, look at table 3-1 at »www.cisco.com/en/US/docs/securit···nse.html
Assuming you're in routed mode, it's the number if concurrent users going out via the outside VLAN.