Q: On the Cisco ONE datasheet it says ISE base licenses include the following. Question I have is what exactly is ‘basic bring your own device’?
Quote from the datasheet:
Cisco Identity Services Engine (ISE) Base** enhances security policy management and control by simplifying access control and security compliance for wired and wireless devices including non cisco device integration. It provides secure access (authentication, authorization, and accounting [AAA] and IEEE 802.1X), guest management, basic bring-your-own-device (BYOD) support, and link encryption (MAC Security [MACsec]).
A: "Bring-your-own-device" or BYOD can mean different things to different people. Some administrators feel BYOD means that network users in an organization are allowed to bring a device they own to work and are allowed access to the guest network for internet access only. Other administrators feel BYOD means that network users who bring a personal device to work will be required to have the device registered with ISE and have the native supplicant of the device provisioned automatically by ISE. Moreover, the device should be enrolled in an MDM solutions as well.
In the former scenario, a Base license allows for personal devices on the network. The supplicant will not be provisioned, but the device can be registered with ISE so as to provide a smooth network access experience for the end user. Little if any configuration is required by the administrator for this functionality. In the latter scenario, a Base and Plus license is required for BYOD. The Base license provides support for network access (AAA) while the Plus license enables Native Supplicant Provisioning (NSP). MDM enrollment of the device required an Apex license.
Regards,
-Tim
