04-14-2013 09:29 AM - edited 03-10-2019 08:18 PM
Hi,
I know there is endpoint limitation of 2000, 10,000 and 100,000 concurrent endpoints, depending on deployment options. Is there any limit on maximum number of "users" ISE supports in these deployment options? All the design documents talk only about endpoint limitation, but nothing on user limitation? Is there any limitaion for concurrent number of users that is supported by ISE?
Also, on the license part, if a user logs in from an endpoint that is profiled (and profiling is used in authorization policy), does it consume 2 licenses, one for the endpoint and one for the user? Will it be both advance license or one base license for user and 1 advance license for endpoint?
Would appreciate any help.
REgards,
Mohan
04-14-2013 11:21 AM
Hi,
Please understand that the concurrent endpoint is the best way to determine the sizing requirements for ISE. The question you ask is valid but the point of setting endpoints is so all scenarios are covered, whether that is a deployment using only user authenticate devices or a mixture of headless devices with user based devices.
If a user connects through a device that is dynamically profiled, postured, or used any of the advanced on-boarding features you will consume one base and one advanced license.
Thanks,
Sent from Cisco Technical Support iPad App
04-25-2013 12:43 AM
Yes, You are correct it has not been mentioned anywhere in any documents the maximum number of supported device.But the concept of each endpoints using the base & advanced license features are made depending on the number of concurrent endpoints an ISE device or VM supports.
If a user is comes in your environment then definitely both base & advanced license features will be consumed since the advance licence adds upon the base license.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: