cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
272
Views
0
Helpful
1
Replies

DNA license for enabling SD-Access (Policy based enforcement)

Eman.Bakri
Level 1
Level 1

I want to configure policy based enforcement between ise and cisco 9200 switch.

does DNA advantage license will do that or i must have advantage license?

 

Thanks in advance

1 Reply 1

Hi

 From ISE perspective, you can follow this licensing scheam:

Cisco ISE license models and types are as it follows:

Cisco ISE Essentials license provides user visibility and enforcement features including AAA and 802.1X, Guest (Hotspot, Self-Reg, Sponsored) and Easy Connect (PassiveID).  

Cisco ISE Advantage license enables all Essentials features plus following capabilities:  

  • Context Sharing (pxGrid Out/In)  
  • Profiling Enforcement  
  • AI Endpoint Analytics Enforcement  
  • Group-Based Policy (TrustSec)  
  • BYOD (+CA, +MDP)  
  • RTC (ANC) 
  • Profiling Visibility  
  • AI Endpoint Analytics Visibility  
  • User-Defined Network for Cloud 

Cisco ISE Premier license is full stack license including all Advantage features plus following capabilities: 

  • Posture Visibility and Enforcement  
  • MDM Visibility and Enforcement  
  • TC-NAC Visibility and Enforcement

From the DNA perspective, you can follow this scheam:

 

Cisco DNA Software

Essentials

Get networking essentials, including basic automation, monitoring, and easy management.

Features include:  

  • Basic automation
  • Monitoring
  • Centralized management

Recommended

Cisco DNA Software

Advantage

Get all Cisco DNA Essentials features plus advanced segmentation, artificial intelligence and machine learning (AI/ML) analytics, and complete visibility with Cisco ThousandEyes. 

Includes all features of Essentials, plus:

  • Policy-based automation with software-defined access
  • Assurance and AI network analytics
  • Complete visibility with Cisco ThousandEyes
  • Cisco DNA Spaces for smart buildings