ISE BOM with Secure Network Server

[marcoadolfo]

we need an estimate Secure Server for ISE but I don' understand the correct BOM composition

Are sufficient next SKUs ?

P/N                             Quantity

SNS-3715-K9               2

ISE-SEC-SUB                1

ISE-E-LIC                   500

SVS-ISE-SUP-B           1

or are missing some sku ?

[owbhat · Accepted solution]

1. SNS-3715-K9 (Quantity: 2)

   • This is a Cisco Secure Network Server (SNS) appliance, model 3715, designed to host Cisco ISE.
   • Quantity of 2 suggests redundancy (e.g., for high availability).

2. ISE-SEC-SUB (Quantity: 1)

   • This is the ISE Security subscription. It usually includes key security features like Threat-Centric NAC, Device Administration (TACACS+), etc.
   • The quantity is listed as 1, but it may need to cover the total number of ISE nodes (or users/devices depending on the deployment type).

3. ISE-E-LIC (Quantity: 500)

   • This is an Essential License, supporting up to 500 active endpoints.
   • Essential licenses are used for basic authentication, authorization, and accounting (AAA) services.

4. SVS-ISE-SUP-B (Quantity: 1)

   • This is a subscription for ISE support services (software and hardware).
   • Like the ISE-SEC-SUB, it may need to cover all nodes or licenses.

---

What's Missing or Needs Clarification?

1. License Coverage

   • Verify if the ISE-SEC-SUB and SVS-ISE-SUP-B quantities are sufficient.
     • If deploying 2 nodes, each node might need these subscriptions/licenses.
     • Alternatively, ensure the subscription covers all endpoints (500 in this case).

2. Additional Licensing

   • Depending on the features required, additional licenses like ISE-ADV-LIC (for advanced features) or ISE-PLS-LIC (for premium features) may be needed.
   • For example, ISE-E-LIC is for basic features; if more advanced use cases are required (e.g., posture, profiling, or BYOD), ADV or PLS might be necessary.

3. Support for Appliances

   • The SVS-ISE-SUP-B is for software support, but hardware support for the SNS-3715 appliances (e.g., CON-SNT-SNS3715) is often needed for RMA or technical assistance.

4. Deployment Roles

   • Confirm the planned roles of the two SNS-3715 servers (e.g., PAN, MnT, or PSN).
   • If a distributed deployment is planned, you might need additional appliances or virtual machines to meet performance and redundancy requirements.

---

Recommendations:

• Validate Quantity: Confirm the ISE-SEC-SUB and SVS-ISE-SUP-B quantities based on your deployment requirements (nodes/endpoints).
• Check Feature Requirements: Determine if only basic features are sufficient or if you need additional licenses for advanced capabilities.
• Add Hardware Support: Ensure SNS appliances have associated support contracts for hardware.

Would you like help calculating the exact BOM for a specific deployment? Let me know if you have any specific queries.

Hope it's helpful.

[marcoadolfo]

perfect, all the necessary items are listed.
I'll check for quantities.
thanks 1k

[ahollifield]

cs.co/ise-berg#license