cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

106
Views
0
Helpful
4
Replies
Cisco Employee

Cisco NAC Appliance (Clean Access) expiry

Team,

what would be the impact of Cisco NAC Appliance (clean Access) license expiry on the end points .  Is it possible to run ISE2.1 with NAC agent 4.9.5.8 . What would be the impact of NAC agent license expiry on the end points deployed .

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Cisco NAC Appliance (Clean Access) expiry

AFAIK the NAC agents aren’t licensed so there would be no implications

If running nac appliance as it’s well end of support and life then recommend deploying ISE 2.2 with latest patch in environment and deploying anyconnect ASAP

Nac agent is end of support as well

View solution in original post

4 REPLIES 4
Cisco Employee

Re: Cisco NAC Appliance (Clean Access) expiry

AFAIK the NAC agents aren’t licensed so there would be no implications

If running nac appliance as it’s well end of support and life then recommend deploying ISE 2.2 with latest patch in environment and deploying anyconnect ASAP

Nac agent is end of support as well

View solution in original post

Cisco Employee

Re: Cisco NAC Appliance (Clean Access) expiry

what would be the impact of NAC appliance license expiry for production end points .

Cisco Employee

Re: Cisco NAC Appliance (Clean Access) expiry

I checked with the product managers on this and we don't have data on an expiring license or behavior. Please start moving the customer off NAC appliance and onto ISE asap as the product is end of life support and if indeed expired then right to use is now gone.

Cisco Employee

Re: Cisco NAC Appliance (Clean Access) expiry

Some further clarification. NAC Appliance licenses were not term. NAC Agent licenses were not separately licensed and do not have notion of agent Apex like AC for Posture.

NAC Agent can be used with ISE up to ISE 2.2: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/compatibility/ise_sdt.html#pgfId-123696

Also note posture would require an Apex license on ISE.