This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
trying to make sense of ISE concurrent users licensing, does it count a user only when it's connected ?
If I have 500 users Active Directory (using groups in policy) or 500 users in local database, are there differences in count ?
Then this doesn't fall under the list of supported NAD, which I am sure you are aware of. Only way to make this work is to live with the alarm notifications and the license enforcement alarms till you can get the NAD upgraded. The HLD should have identifies this as being an issue.
Sent from Cisco Technical Support Android App
It does not depend on the whether the users belong to Active directory or local database.it depends on the number of users authenticated & connected to the network through ISE.The count decrements as the user gets disconnected. As per your other query HLD is High Level Design which is submitted and reviewed by the Cisco team before your purchase an ISE appliance or an SKU.
The count value is the number of endpoints across the entire deployment that are concurrently connected to the network and accessing the service.
Concurrent endpoints represent the total number of supported users and devices. An endpoint can be any combination of users, personal computers, laptops, IP phones, smart phones, gaming consoles, printers, fax machines, or other types of network devices.
Active Directory and local DB users are not counted separately. The count is on the basis of number of user and non-user endpoints connected. They can be Printers, IP Phones, labtops, iphones and android phones etc.
A High Level Design (HLD) is a document which is required to be submitted by ATP and non-ATP partners of ISE at the time or before they place an order for ISE products except lab and wireless only orders. HLD should be written by an ISE Trained Engineer.
Reason behind getting a HLD submitted by the partners is to make sure the ISE is deployed properly as it is supposed to be. There is a SAC BU approved template of HLD which needs to be filled and sent to firstname.lastname@example.org, where a dedicated team review that particular HLD and approves if they find all the information correct in the document.
For more information on the HLD you please go threough the link below:-