Cisco ISE Endpoint Purge -license needed- ?

[alois.heilmaier]

I have some Licensing issues with Cisco ISE (Base license).

With Base License I will be able to provide Guest/TrustSec/AAA/Radius dot1x.

1.) On my Cisco ISE  I need to purge Endpoints immediately.

But unfortunately I get an error:

"HTTP Status 401 - One or more licenses are Out of Compliance for more than XX days, corresponding service configuration will be disabled"

2.) Edit or Change the Purge Policy is also not working. Maybe due to License Problem.

Is there really more than a Base License needed for such simple things ?

[Marvin Rhoads]

What version of ISE are you using?

2.2 had a bug with this feature that incorrectly looked for a license beyond base (e..g Plus or Apex). I believe 2.2 patch 1 fixed it.

[Rahul Govindan · Accepted solution]

Marvin is correct. Bug details:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd01079/?referring_site=bugquickviewclick

[Marvin Rhoads · Accepted solution]

Thanks Rahul.

They haven't updated the BugID but the 2.2 Release notes confirm it is fixed in Patch 1:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html#pgfId-746713

[alois.heilmaier]

Thanks Marvin, Thanks Rahul,

Bug describes exactly my problem.

Unfortunately I do have Version 2.2.0.470 Patch1(until now the newest). Problem still exists.

There are more Problems with base license. e.g.

- I also use the myDevice Portal to register Mac-Adresses. This Portal can't be changed anymore.

- Disable Device Profiling. Same Problem.

[Marvin Rhoads]

Since you have the patch documented to fix the bug and yet are still seeing the symptoms, please open a TAC case.

They can work with you to best ascertain if it is a new bug or if the fix for old one wasn't properly regression tested (or if it's something else altogether).