ISE Device Auth Licensing

[Steven Williams]

How does the licensing work for ISE when using the "ACS" piece for device auth? Is it per device? Is a device considered an endpoint?

[Francesco Molino]

Hi 

You're talking about the TACACS license in ISE or authenticating using standard radius protocol? 

For tacacs you have 1 license but you need at least 100 base license to be activated. 

A license is consumed for every active session. That means you can have 100 devices but user only 10 licenses because you're connected on 10 devices at the same time. This is an example. 

Here the licensing guide: 

http://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf#page5

Hope that clarify.

Thanks 

PS: Please don't forget to rate and mark as correct answer if this answered your question

[Steven Williams]

Here is what I have.

C1-ISE-BASE-AP

Cisco ONE Identity Services Engine 25 EndPoint Base Lic

[Francesco Molino]

It means that you can have 25 active sessions at the same time with this license. 

What do you mean by "ACS" piece?

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question