ISE and AnyConnect APEX License

[gaigl]

Hello,

Question about Licensing:

we've a Firepower 2120 and 2000 APEX Licenses for the Users.

And we've a ISE 2.4. with a Base 100 License (for WLAN Radius Auth)

Now we want to establish an Accounting of the AnyConnect-Clients of the Firepower to the ISE.

Can I import the Anyconnect APEX License to the ISE, or can I just establish the Acoounting?

I guess the ISE will create Messages about over-consumption of the Base-License, or can I ignore this because we have the License?

I don't want to make any Posture or NAM, this happens on the Firepower.

thanks for Advice

Karl

[Mike.Cifelli · Accepted solution]

Can I import the Anyconnect APEX License to the ISE, or can I just establish the Acoounting?
-You can enable/establish accounting to track concurrent endpoints on the network. The AnyConnect Apex licenses do not get consumed in ISE, and you are unable to track consumption of them with ISE. AnyConnect Apex Licenses in relation to ISE features are essentially a 'right-to-use'.
I guess the ISE will create Messages about over-consumption of the Base-License, or can I ignore this because we have the License?
-Enabling accounting will allow you to track any/all ISE session based license consumption in ISE and generate alarms should you exceed your limit.
See this link for more detail: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_0110.html
HTH!

[gaigl]

Thank you Mike,

just to get it right:

I can establish the Accounting, when there are about 500 concurrent VPN-Connections and about 70 WIFI Connections, witout License Violation?

[Mike.Cifelli]

I can establish the Accounting, when there are about 500 concurrent VPN-Connections and about 70 WIFI Connections, witout License Violation?
-Based on info you provided, yes. Once properly setup you can track ISE licensing via Administration->System->Licensing. Cheers!

[gaigl]

Thank you Mike