topic Re: Cisco ISE in Network Access Control

Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 09:10:38 GMT

Friends,

I have 2.2.0.470 version with patch version 8 installed in my ISE boxes, I see lot of options missing under Administration, work centres. for ex: I don't see device administration, and various other options in other tabs, how can I enable these options? do I have to upgrade to 2.4? Please let me know. Thanks!

Re: Cisco ISE

pan — Wed, 13 Feb 2019 09:22:27 GMT

Are you logging in Admin node? Only Admin node will show all the option.

Re: Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 09:34:46 GMT

Hello Pan,

Thank you for your quick response. I am the super admin. I also checked using the local account. I still don't see it. This is strange. I am not sure if I am missing something here.

Re: Cisco ISE

pan — Wed, 13 Feb 2019 09:39:04 GMT

Super admin is different from admin node. You also need to login as super admin but you need to login to admin node of your deployment.

How many node you have in your network? Could you share screenshot of what you are seeing?

For example there are two node in below screenshot. We need to login to primary admin node.

Re: Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 10:43:38 GMT

Hello Sir,

Please see below screenshots. I am logging to the primary node. As I said earlier, I logged in with the local admin credentials.

Re: Cisco ISE

pan — Wed, 13 Feb 2019 10:56:43 GMT

Could you share below screenshot and also share with which user you have tired to login.

Administration>System>Admin Access

Re: Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 11:10:55 GMT

Hi - Please find the screenshot. Yes, I am entering thru "Administration>System>Admin Access"

Re: Cisco ISE

Jason Kunst — Wed, 13 Feb 2019 12:48:58 GMT

Could it be that they only have a base license installed?

Re: Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 13:13:14 GMT

Hi Jason,

Thanks for your question, Yes, I see device admin has been disabled in licensing. Does this mean we need to get Plus or Apex license? We are planning to upgrade the ISE to 2.4 from the current 2.2.0.470 version. Please see the screenshot. Thanks!

Re: Cisco ISE

Sai Paritala — Wed, 13 Feb 2019 13:52:59 GMT

Thank you Pan and Jason for your insight. I think we should get new smart license for device administration and other stuff. Will get back to you if I need any more info.

Regards,

Sai.

Re: Cisco ISE

Jason Kunst — Wed, 13 Feb 2019 16:26:38 GMT

please see page 4 table 4 for features mapped to license levels
https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf