cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Choose one of the topics below for resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.

106
Views
2
Helpful
4
Replies
Highlighted
Cisco Employee

What kind of ISE profiling is possible on SG500?

Hi experts,

In the ISE 2.3 Compatibility Matrix I can see that profiling is supported for SG500 is a limited fashion:

Cisco Identity Services Engine Network Component Compatibility, Release 2.3 - Cisco

Can we get more information on the scope of profiling that is possible on the SG500?

Thanks in advance,

José

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: What kind of ISE profiling is possible on SG500?

It will work as well with SNMP , NMAP as well as DHCP , as I explained it wasnt tested thoroughly but in theory it should be capable . I suggest a trial and error approach and would be happy to get any feedback from your findings.

As for you license question , profiling does not need PLUS licensing , however if you intend to enforce policies based on profiles then yes you would need to have PLUS in place.

Thanks,

Danny

4 REPLIES
Cisco Employee

Re: What kind of ISE profiling is possible on SG500?

Hi Jose,

SG500 can provide limited profiling for endpoints.We dont have a reference as it hasnt been thoroughly tested.

Really all depends on the type of AVs the SG500 can provide.

What is your use case?

Danny

Cisco Employee

Re: What kind of ISE profiling is possible on SG500?

No particular use-case in mind yet - the customer is evaluating ISE and he is trying to understand the limitation for the existing SMB switches he has.

So as I understood from your answer, the only probe we would use is RADIUS for the SMB switches. We would need the PLUS subscription in any case, correct?

Thanks again,

José

Cisco Employee

Re: What kind of ISE profiling is possible on SG500?

It will work as well with SNMP , NMAP as well as DHCP , as I explained it wasnt tested thoroughly but in theory it should be capable . I suggest a trial and error approach and would be happy to get any feedback from your findings.

As for you license question , profiling does not need PLUS licensing , however if you intend to enforce policies based on profiles then yes you would need to have PLUS in place.

Thanks,

Danny

Cisco Employee

Re: What kind of ISE profiling is possible on SG500?

Thanks for the help Danny!

CreatePlease to create content
Ask the Expert- Webex Hybrid Services Solutions