ISE BOM with Secure Network Server

marcoadolfo — Thu, 23 Jan 2025 10:40:07 GMT

we need an estimate Secure Server for ISE but I don' understand the correct BOM composition

Are sufficient next SKUs ?

P/N Quantity

SNS-3715-K9 2

ISE-SEC-SUB 1

ISE-E-LIC 500

SVS-ISE-SUP-B 1

or are missing some sku ?

Re: ISE BOM with Secure Network Server

owbhat — Thu, 23 Jan 2025 10:58:03 GMT

SNS-3715-K9 (Quantity: 2)
- This is a Cisco Secure Network Server (SNS) appliance, model 3715, designed to host Cisco ISE.
- Quantity of 2 suggests redundancy (e.g., for high availability).
ISE-SEC-SUB (Quantity: 1)
- This is the ISE Security subscription. It usually includes key security features like Threat-Centric NAC, Device Administration (TACACS+), etc.
- The quantity is listed as 1, but it may need to cover the total number of ISE nodes (or users/devices depending on the deployment type).
ISE-E-LIC (Quantity: 500)
- This is an Essential License, supporting up to 500 active endpoints.
- Essential licenses are used for basic authentication, authorization, and accounting (AAA) services.
SVS-ISE-SUP-B (Quantity: 1)
- This is a subscription for ISE support services (software and hardware).
- Like the ISE-SEC-SUB, it may need to cover all nodes or licenses.

License Coverage
- Verify if the ISE-SEC-SUB and SVS-ISE-SUP-B quantities are sufficient.
  - If deploying 2 nodes, each node might need these subscriptions/licenses.
  - Alternatively, ensure the subscription covers all endpoints (500 in this case).
Additional Licensing
- Depending on the features required, additional licenses like ISE-ADV-LIC (for advanced features) or ISE-PLS-LIC (for premium features) may be needed.
- For example, ISE-E-LIC is for basic features; if more advanced use cases are required (e.g., posture, profiling, or BYOD), ADV or PLS might be necessary.
Support for Appliances
- The SVS-ISE-SUP-B is for software support, but hardware support for the SNS-3715 appliances (e.g., CON-SNT-SNS3715) is often needed for RMA or technical assistance.
Deployment Roles
- Confirm the planned roles of the two SNS-3715 servers (e.g., PAN, MnT, or PSN).
- If a distributed deployment is planned, you might need additional appliances or virtual machines to meet performance and redundancy requirements.

Validate Quantity: Confirm the ISE-SEC-SUB and SVS-ISE-SUP-B quantities based on your deployment requirements (nodes/endpoints).
Check Feature Requirements: Determine if only basic features are sufficient or if you need additional licenses for advanced capabilities.
Add Hardware Support: Ensure SNS appliances have associated support contracts for hardware.

Would you like help calculating the exact BOM for a specific deployment? Let me know if you have any specific queries.

Hope it's helpful.

marcoadolfo — Thu, 23 Jan 2025 11:12:05 GMT

perfect, all the necessary items are listed.
I'll check for quantities.
thanks 1k

ahollifield — Thu, 23 Jan 2025 15:04:40 GMT

cs.co/ise-berg#license