10-06-2015 03:49 AM - edited 03-10-2019 11:07 PM
Hi Guys, I am confused regarding ISE licensing. We want most of the items, including wired, wireless, VPN, Guests, profiling, posture etc.
So a vendor quoted on base + endpoint apex licenses (and anyconnect) and they say that will cover us.
Is this correct since the licensing page suggests we need much more than that?
Thanks!
Jacques
Solved! Go to Solution.
10-06-2015 07:09 AM
While you can technically run an ISE deployment with only Base and Apex (and AnyConnect Apex if you aren't using native supplicants) licenses, you typically require Plus licenses also if you are planning to use any of the services it provides (including profiling).
You also need the line items for the server(s) themselves - whether appliance- or VM-based.
10-06-2015 07:09 AM
While you can technically run an ISE deployment with only Base and Apex (and AnyConnect Apex if you aren't using native supplicants) licenses, you typically require Plus licenses also if you are planning to use any of the services it provides (including profiling).
You also need the line items for the server(s) themselves - whether appliance- or VM-based.
10-10-2015 10:49 PM
Hi,
ISE posturing feature not supported in VM-based.
regards,
10-11-2015 07:14 AM
Shaik,
What is your source for that information? I have configured VM-based ISE deployments with posturing enabled and actively in use.
The Posture feature requires Apex licensing (or the old Advanced license for pre-1.3 deployments) but is not limited to physical vs. virtual machine-based nodes.
10-11-2015 10:30 PM
hi Marvin,
i found it on Cisco..
10-12-2015 05:44 AM
Shaik,
Inline Posture Node or IPN is not the same as the posture feature.
IPN is used when we need to support posture services and the network access device (typically a legacy firewall) does not support CoA. Under the covers it is a legacy NAC appliance rebranded as an ISE node.
It was rarely deployed. Since ASA software 9.2(1) introduced CoA support, it is becoming even less common.
Posture is part of session services and is supported on VMs across all ISE versions as long as you have the necessary license.
10-06-2015 09:38 AM
Yes they came back to me saying we need plus as well. Management would not have been very impressed having to go back to business asking for more money. And yes we are doing the VM
Thanks for the reply
Jacques
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide