topic Re: Posturing without profiling in Network Access Control

Posturing without profiling

nikhilcherian — Thu, 12 Oct 2017 16:32:09 GMT

My customer wants to make efficient utilization on ISE licenses, he doesn't corporate PC to be profiled, but instead use the Profiling License only for other end points like IP phone & wireless access points. Is this possible

Regards

Nikhil

Re: Posturing without profiling

Dustin Anderson — Thu, 12 Oct 2017 18:00:16 GMT

Unless it's change, no you would use all 3 licenses.

Basically for posture check you use an Apex, Plus, and Base.

Basically if the feature uses a license type, it will also consume 1 of each lower license type.

Re: Posturing without profiling

nikhilcherian — Fri, 13 Oct 2017 04:19:35 GMT

Thank you

Re: Posturing without profiling

Jason Kunst — Fri, 13 Oct 2017 16:18:04 GMT

if you aren’t using profiling (endpoint group) for the authz policy then it should only consume base plus apex but there maybe issues with posture lease requiring plus

this will require validation

If any issues would recommend referencing this thread and reaching out to the ISE PMs , Kevin Gagnon and Matt Schmitz