topic Re: Cisco ISE Version 2.7 VM License in Network Access Control

Cisco ISE Version 2.7 VM License

viv42 — Wed, 14 Jun 2023 14:50:36 GMT

Hi Team,

I have upgraded the ISE from 2.3 to 2.7 version. I have a total of 4 nodes on VM ESXI and 4 VM licenses.

What if I do not install the VM licenses on ISE nodes?

As per the Cisco Document, there will be no service interruption. Please find the snap below.

If there is now service impact then what is the actual use of VM licenses?

Re: Cisco ISE Version 2.7 VM License

ahollifield — Wed, 14 Jun 2023 16:10:41 GMT

Correct, missing VM licenses display a warning message in the GUI. You are not in license compliance without installing 4 VMC licenses. Also why not upgrade to 3.1 or 3.2? https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2943876.html

Re: Cisco ISE Version 2.7 VM License

Marvin Rhoads — Thu, 15 Jun 2023 02:57:25 GMT

The actual use of the licenses is to demonstrate that you are compliant with the terms and conditions you accepted when accepting the End User License Agreement (EULA).

Re: Cisco ISE Version 2.7 VM License

Ambuj M — Thu, 15 Jun 2023 04:39:54 GMT

just keep one additional thing in mind if you are using TACACS, in 2.3 you only need a single license per deployment, once you upgrade to 2.7 I think you need 1 tacacs license per node. you don't need to purchase anything as it change entitlement for 50 device administration licenses but it is not an automated entitlement, so you will have to call Cisco Licensing most likely.

If you don't use ISE for TACACS, then don't worry about it.

Re: Cisco ISE Version 2.7 VM License

viv42 — Sat, 17 Jun 2023 04:27:29 GMT

Thank you all for your quick response.