ISE MIGRATION TO AWS

[RobCetti79]

Hi there

We would like to seek your guidance regarding the migration of our production ISE licenses to the new AWS nodes. At present, all AWS ISE nodes are running under evaluation licenses, which are due to expire in approximately 46 days. 

Given the project timeline, we do not expect to complete the migration before the evaluation licenses expire. Additionally, our preference is to maintain the existing production ISE environment fully licensed and operational while the migration is in progress, allowing for a parallel migration approach. 

Could you please advise on the available licensing options? Specifically:

• Is there a temporary or transitional license that can be applied to the AWS ISE deployment during the migration period?
• Is it possible to obtain an extension of the current evaluation licenses?
• Are there any recommended approaches for supporting a parallel ISE migration while retaining licensing on the existing production environment?

 We would greatly appreciate your recommendations and guidance on the best path forward.

[Greg Gibbs]

There are no temporary or transitional licenses outside the 90 day eval. If you need. licensing past the 90 days, you would need to purchase that additional licensing.

You might reach out to your Cisco account team to see if there is something they can swing to help you.

[RobCetti79]

Hi Greg, thank you for your response. So are there no recommended approaches for supporting a parallel ISE migration to AWS while retaining licensing on the existing production environment? Would it simply be a case of migrating from the production environment to AWS, and that production environment would be decom'd. Or, are you saying that if we wanted to run the 2 environments in parallel beyond the 90 Day Eval Period, we'd have to have to purchase more (eval) licenses for our AWS nodes?

[Greg Gibbs]

For any VM-based ISE clusters (on-prem, cloud) registered to your smart account, you need to have enough VM Common (VMC) licenses in that account to cover all ISE nodes.

It looks like the Licensing Guide does now include a section on how to request an additional 90 day extension.
https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#4CiscoISELicensingEvaluationandPurchaseCiscoISElicenses

[masonreed11tt]

Recommend contacting Cisco licensing support to request a temporary migration license or evaluation extension. This should allow the AWS ISE nodes to remain operational while keeping the existing production environment licensed during the parallel migration. Start the request early since the current evaluations expire in about 46 days.