deploy ISE on a VMware Virtual Machine

[NavyaBhati5409]

HI,

i want to deploy cisco ISE on vmware Exsi, what will be the prerequisite and licenses will be required for this deployment. in 90 days evaluation all the functionality like profiling posturing is also include.   

[marce1000]

                   (look for 'VMware Virtual Machine Requirements')

 https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24.pdf

 M.

[NavyaBhati5409]

for wireless dot1X we require WLC in network?? i have two cisco catalyst switches in my network can i configure dot1x on existing switches or need to deploy another L2 switch fot dot1X.

[Damien Miller]

I would recommend you engage your Cisco partner/reseller to help you scope this.  The licensing will have to be purchased through one anyways. 

You will require base licenses for any authentication, plus licensing if you authenticate using attributes gathered from profiling probes, and apex licensing if you want posture.

If you want TACACS device admin licensing then that is licensed on a per node basis, one TACACS node license per node you enable it on.  

If you want VM ISE nodes, you will need a VM node license per node that gets deployed, these come in three sizes based on the required scale.  

This is all covered in the ISE ordering/licensing guide with some helpful examples as well.  

https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

[NavyaBhati5409]

Hi 

can you tell me about the vm license like how can i purchase or manage, during the 90 days evaluation Will i need it. or else i can deploy ISE for 90 days without vm node license. it will be work properly.

[Marvin Rhoads]

While running in evaluation mode it is not necessary to purchase any license.

No purchased Base, Plus, Apex, Device Administration or VM licenses are needed - all features will work without restriction during the 90-day evaluation period.

[NavyaBhati5409]

hi any one can share with some use cases to deploy cisco ise in network.

[Marvin Rhoads]

There are many, many use cases.

Please take some time to read the basics before posting such an open-ended question.

For example: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/data_sheet_c78-656174.html#Productoverview