Cisco ISE quote

[Hamada Ahmed]

I am planning to order Cisco ISE,

my question is

Do I need to quote with SNS_3595, Cisco ISE passive identity connecter?  also I don't know what function of it?

also do I need to add L-ISE-TACACS-ND=? or it's include on premier license?

[Rob Ingram]

@Hamada Ahmed you cannot order the 3595 hardware, the latest hardware is 3800 series. https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/secure-network-server-3800-series-ds.html

The L-ISE-TACACS-ND= (Device Admin) license is a separate license and not included in another license (premier).

What ISE features do you require? Refer to this guide to determine what features you want, this will identify which license you need to purchase https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#32ISESubscriptionLicenses

[Aref Alsouqi]

Are you looking for ISE passive identity connector? what are you going to use ISE for?

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/pic_admin_guide/pic_admin31/pic_admin31_chapter_01.html#Cisco_Concept.dita_c65736e9-e7aa-4140-a368-90194e40311e

[Hamada Ahmed]

it's not clear the meaning and usage of ISE passive identity connector, 

What is the need of ISE-PIC?

[Rob Ingram]

@Hamada Ahmed ISE PIC provides user-to-IP mapping without actively authenticating users using 802.1X. It relies getting the User information from the Windows login events logs generated on theAD Domain Controllers. It's license separately to ISE, if you purchase ISE Essentials license you get Easy Connect (Passive ID), which provides the same functionality as ISE PIC.

ISE PIC is going EOL https://www.cisco.com/c/en/us/products/collateral/security/ise-passive-identity-connector/ise-pic-eol.html

[Aref Alsouqi]

As @Rob Ingram mentioned, ISE passive identity connector is a light version of ISE that is responsible to collect user-IP mapping from external sources without having to actively authenticate the users. For instance, you can connect your ADs to ISE PIC and parse the users information from the AD security logs through the connectors, and then ISE can share those information with FMC to enforce user-based security policies. That's just an example of a use case of ISE PIC.

[ahollifield]

https://www.cisco.com/c/en/us/products/collateral/security/ise-passive-identity-connector/ise-pic-eol.html