Security-Groups not availble in Authorizatin-Profile list

[Imran Ahmad]

Hello,

on my ISE, I created some Security-Groups,  but when I want to create new Authorization-rule and apply those Security-Groups  as the Authz-Profile,  but I can not see the (Security-Group Folder) listed in the list.   only these 2-folders are list (Standard & Inline Posture) .

I have attached the screen-shot.  please advise me

[nspasov]

That is strange, you should be seeing the Security Groups option there as well. What version and patch are you running on your ISE deployment?

Thank you for rating helpful posts!

[Imran Ahmad]

I have OS 1.2,  with Base-license installed

[nspasov]

Hi Imran, the issue is with your licensing. TrustSec/SGA/SGT requires plus licensing. For more info take a look at the following link:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html

Thank you for rating helpful posts! 

[Imran Ahmad]

Thanks Neno.  I need the SGA & SGT feature for my Wireless-clients.  so i think i should go with the PLUS license option. not with the WIRELESS option.  am i right ?   because i don't need advanced license for my wireless clients, i only need SGT support

[nspasov]

So the wireless license will give you all features but for wireless only. So in essence plus+advanced features. The drawback is that it will not work for wired and vpn based authentications. But if you don't care about those then you will be OK. So I would go with whatever option fits not only your current but also your future needs :)

Thank you for rating helpful posts! 

[Imran Ahmad]

Thanks Neno

one else question-  I am ordering new Cisco ASA 5500-X , ISR 4431,  & Switch 3560-X

So need all of  them have support for TrustSec,  SGACL,  and SG-FW  features.    can you tell me should i order extra licenses for those products to enable the support for Trustsec/SGT/SGACL & SGFW ?  or they have these features enabled bydefault ?

[nspasov]

Hi Imran, here a link that will answer your questions:

http://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/trustsec/product_bulletin_c25-712066.html

Thank you for rating helpful posts!