01-19-2017 06:05 AM - edited 03-11-2019 12:22 AM
Hi.
We have plenty of SUP 5 deployed throughout our sites (200+)
and wanted to find out what ISE features are supported for SUP 5?
on the ISE 2.x compatibility list, I only see SUP 6 or higher.
Nothing is mentioned about SUP 5.
What I need to find out is what feature of ISE is supported on SUP 5?
We are planning to do dot1x, mab, profiling, and posture in future.
So I need to find out what is supported and what not.
Please provide URL or documentation so that I can present it to my customers.
Thanks,
Solved! Go to Solution.
01-19-2017 10:16 AM
One of my very first ISE deployments (1.0 days) involved a 4500 with SUP-V. I had tons of issues back then but I believe most of them were ISE related. The 1.0 days of ISE were very rough :) With that said, I believe outside of SGT and Device Sensor everything else was supported. In fact, if you look at the older compatibility matrix for ISE it only states that you need to run a min version of 12.2.54-SG1(ED) but nothing about an actual supervisor model:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-1/compatibility/ise_sdt.html
Thus, if you need/want to run Device Sensor and/or SGT/TrustSect then you will need to get new hardware.
Now, before you move forward with anything I would highly suggest you double check the information with Cisco. Like I said, it has been almost 5 years since I have worked with a SUP-V 4500 and ISE :)
I hope this helps!
Thank you for rating helpful posts!
01-19-2017 10:16 AM
One of my very first ISE deployments (1.0 days) involved a 4500 with SUP-V. I had tons of issues back then but I believe most of them were ISE related. The 1.0 days of ISE were very rough :) With that said, I believe outside of SGT and Device Sensor everything else was supported. In fact, if you look at the older compatibility matrix for ISE it only states that you need to run a min version of 12.2.54-SG1(ED) but nothing about an actual supervisor model:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-1/compatibility/ise_sdt.html
Thus, if you need/want to run Device Sensor and/or SGT/TrustSect then you will need to get new hardware.
Now, before you move forward with anything I would highly suggest you double check the information with Cisco. Like I said, it has been almost 5 years since I have worked with a SUP-V 4500 and ISE :)
I hope this helps!
Thank you for rating helpful posts!
01-25-2017 06:51 AM
Neno,
Thanks for your input.
I will check with Cisco SE.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide