topic Re: ISE licensing in Network Access Control

ISE licensing

wchik — Fri, 01 Jun 2018 09:09:01 GMT

Hi Experts,

One quick question about ISE Device Administration License. My customer has 500+ devices that want to use ISE TACACS+ feature for management. Reading through some previous emails it seems I only need 1 x below SKU’s

L-ISE-TACACS=

L-ISE-BSE-100=

https://search-prd.cisco.com/topic/news/cisco/eng/positron-pm/dsc09820.html#09820

Even in a cluster environment.

However, when looking in the latest ordering guide, it seems like we need a license for each administration node:

https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

2 x L-ISE-TACACS=

2 x L-ISE-BSE-100=

Can we confirm if it is single license or 2 x licenses, and whether there is any difference amongst the versions? My customer is targeting 2.3 version.

Thanks,

Wendy

Re: ISE licensing

Jason Kunst — Fri, 01 Jun 2018 10:30:37 GMT

License are per deployment so you only need one for now, for future this will change where you will be required to license each psn for tacacs separately

A deployment consists of up to 2 admin and 2 monitoring plus up to 50 psn

Re: ISE licensing

Jason Kunst — Fri, 01 Jun 2018 11:18:39 GMT

Please reference more information as well in the partner community under http://cs.co/selling-ise

https://communities.cisco.com/community/partner/security/blog/2018/02/17/ise-license-evolution-starts-now?mobileredirect=true

Re: ISE licensing

wchik — Fri, 01 Jun 2018 16:51:48 GMT

Thanks Jason,

How will the licenses convert if they upgrade to 2.4? Do they need to purchase extra licenses in 2.4?

Regards,

Wendy

Re: ISE licensing

Jason Kunst — Fri, 01 Jun 2018 19:18:23 GMT

Please reference the information i shared if something is missing then please reply to that link