Cisco ISE 3.2 Premier License in Evaluation Mode

[ifabrizio]

Dear All,

I have setup a CTS enviroment composed by two ISE 3.2 and some switches to test the trustsec, all works as expected.

Now I' d like to extend in the production network, the CTS features, in the meantime I will order the Premier license for the two ISE, that now are working in the evaluation mode, for this license tier.

My qyestion is, in the wrost case that I am not able to purchase the Premier lics, before that, the evaluation period expire, what it happen?

I mean yhe Swiches enrolled in the CTS continue to works? Or all traffic in the Vlan where cts enforcement is enabled will be blocked?

Bye,

JF.

[Rob Ingram · Accepted solution]

@ifabrizio 

"When Evaluation licenses expire at the 90-day mark, administrators can view only the Licensing window in the Cisco ISE administrator portal. No alarms are sent to administrators to notify them of Evaluation license expiration."

"You may request an extension to your Evaluation licenses by adding another 90-day Evaluation license. You can also ask for your Evaluation license to support more than 100 endpoints. To increase endpoint support or to extend the Evaluation license duration, open a case via the SCM tool with your Unique Device Identifiers (UDIs), your license request, and a justification message."

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html

[ammahend · Accepted solution]

your traffic will pass, your switch config will stay intact, but you will loose ability to manage ISE as Rob mentioned.

Also for trustsec you don’t need premier license, advantage is sufficient.