topic ISE Device Auth Licensing in Network Access Control

ISE Device Auth Licensing

Steven Williams — Mon, 11 Mar 2019 07:34:59 GMT

How does the licensing work for ISE when using the "ACS" piece for device auth? Is it per device? Is a device considered an endpoint?

Hi

Francesco Molino — Wed, 29 Mar 2017 23:29:36 GMT

You're talking about the TACACS license in ISE or authenticating using standard radius protocol?

For tacacs you have 1 license but you need at least 100 base license to be activated.

A license is consumed for every active session. That means you can have 100 devices but user only 10 licenses because you're connected on 10 devices at the same time. This is an example.

Here the licensing guide:

http://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf#page5

Hope that clarify.

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question

Here is what I have.

Steven Williams — Fri, 31 Mar 2017 15:21:40 GMT

Here is what I have.

C1-ISE-BASE-AP

Cisco ONE Identity Services Engine 25 EndPoint Base Lic

It means that you can have 25

Francesco Molino — Sat, 01 Apr 2017 01:20:48 GMT

It means that you can have 25 active sessions at the same time with this license.

What do you mean by "ACS" piece?

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question