Question:
I am going to Order (SNS-3415-K9) ISE product to deploy at my company, my concern is the size of license I shall order, and how to know the correct number. I have workstations (PC’s), laptops, Printers, IP-CAM’s, and WLC with 50 AP. How I can determine the number of license I should get in order to have the benefits from Cisco ISE.
Cisco Identity Services Engine (ISE) Ordering Steps
Here’s guide which can help in finding solution of your problem
1. Estimate the number of concurrent endpoints in the network.
2. Estimate the number of appliances (physical or virtual) needed to support the number of concurrent endpoints
in the network.
3. Select the appropriate type of appliance suitable for your deployment. (Reference the appliance selection.)
4. Select the appropriate type of license suitable for your deployment. (Reference the license selection.)
5. Select the appropriate level of services available from Cisco Advanced Services or a Certified Partner for design,
Deployment and sustaining services of the ISE deployment.
Step 1: Estimate the Number of Concurrent Endpoints in the Network
Estimating the total number of concurrent endpoints is dependent on a number of variables. An approach to consider would be to take into account:
• Number of employees in the organization
• Average number of devices per employee (desktop, laptop, smartphone, desk IP phone, etc.)
• Number of switch ports currently in the organization
• Number of access points deployed in the organization
• Average number of devices per access point
• Dynamic IP address range being used
• Average number of guests expected to join the network
• Inventory of non-user devices such as IP cameras, printers, IP-enabled projectors, etc.
A combination of factors that includes but is not limited to the above factors could be used to determine the total number of concurrent endpoints in the network.
Step 2: Cisco ISE Appliances and Servers* Options
Cisco Identity Services Engine Appliances |
Option 1: Cisco Identity Services Engine Appliances and Servers* | Product Number | Endpoints Supported |
Cisco Secure Network Server 3415* | SNS-3415-K9 | 5,000 |
Cisco Secure Network Server 3495* | SNS-3495-K9 | 20,000 |
Step 3: Cisco Secure Network Server Support SKUs*
Product Number | SMARTnet Part Number | Description |
SNS-3415-K9* | CON-SNT-SNS-3415 | Cisco SMARTnet support for SNS-3415-K9 - 8x5 Next Business Day |
Step 4: Select the Type of License
Step 5: Cisco ISE License Options
License Type | Features Supported | Deployment Type Supported | License Prerequisite | License Term(s) |
Base License | AAA Guest Provisioning Link Encryption Policies | Wired Wireless VPN | - | Perpetual |
Advanced License | Device Onboarding/Provisioning Device Profiling and Feed Service* Host Posture Security Group Access Integrated Vendor MDM Support* | Wired Wireless VPN | Base License | 3- and 5-Year Terms |
Wireless License | Device Onboarding/Provisioning AAA Guest Provisioning Link Encryption Policies Device Profiling and Feed Service* Host Posture Security Group Access Integrated Vendor MDM Support* | Wireless | - | 3- and 5-Year Terms |
Step 6. Cisco ISE Functionality-Based License Options
License Tiers (T) | Number of Endpoints Supported | Base License | Advanced 3-Year License | Advanced 5-Year License | Wireless 3-Year License | Wireless 5-Year License | Wireless Upgrade 3-Year License | Wireless Upgrade 5-Year License |
100 | 100 Endpoints | L-ISE-BSE-100= | L-ISE-ADV3Y-100= | L-ISE-ADV5Y-100= | L-ISE-AD3Y-W-100= | L-ISE-AD5Y-W-100= | L-ISE-W-3UPG-100= | L-ISE-W-UPG-100= |
250 | 250 Endpoints | L-ISE-BSE-250- | L-ISE-ADV3Y-250= | L-ISE-ADV5Y-250= | L-ISE-AD3Y-W-250= | L-ISE-AD5Y-W-250= | L-ISE-W-3UPG-250= | L-ISE-W-UPG-250= |
500 | 500 Endpoints | L-ISE-BSE-500= | L-ISE-ADV3Y-500= | L-ISE-ADV5Y-500= | L-ISE-AD3Y-W-500= | L-ISE-AD5Y-W-500= | L-ISE-W-3UPG-500= | L-ISE-W-UPG-500= |
1000 | 1000 Endpoints | L-ISE-BSE-1K= | L-ISE-ADV3Y-1K= | L-ISE-ADV5Y-1K= | L-ISE-AD3Y-W-1K= | L-ISE-AD5Y-W-1K= | L-ISE-W-3UPG-1K= | L-ISE-W-UPG-1K= |
1500 | 1500 Endpoints | L-ISE-BSE-1500= | L-ISE-ADV3Y-1500= | L-ISE-ADV5Y-1500= | L-ISE-AD3Y-W-1500= | L-ISE-AD5Y-W-1500= | L-ISE-W-3UPG-1500= | L-ISE-W-UPG-1500= |
2500 | 2500 Endpoints | L-ISE-BSE-2500= | L-ISE-ADV3Y-2500= | L-ISE-ADV5Y-2500= | L-ISE-AD3Y-W-2500= | L-ISE-AD5Y-W-2500= | L-ISE-W-3UPG-2500= | L-ISE-W-UPG-2500= |
3500 | 3500 Endpoints | L-ISE-BSE-3500= | L-ISE-ADV3Y-3500= | L-ISE-ADV5Y-3500= | L-ISE-AD3Y-W-3500= | L-ISE-AD5Y-W-3500= | L-ISE-W-3UPG-3500= | L-ISE-W-UPG-3500= |
5000 | 5000 Endpoints | L-ISE-BSE-5K= | L-ISE-ADV3Y-5K= | L-ISE-ADV5Y-5K= | L-ISE-AD3Y-W-5K= | L-ISE-AD5Y-W-5K= | L-ISE-W-3UPG-5K= | L-ISE-W-UPG-5K= |
10,000 | 10K Endpoints | L-ISE-BSE-10K= | L-ISE-ADV3Y-10K= | L-ISE-ADV5Y-10K= | L-ISE-AD3Y-W-10K= | L-ISE-AD5Y-W-10K= | L-ISE-W-3UPG-10K= | L-ISE-W-UPG-10K= |
25,000 | 25K Endpoints | L-ISE-BSE-25K= | L-ISE-ADV3Y-25K= | L-ISE-ADV5Y-25K= | L-ISE-AD3Y-W-25K= | L-ISE-AD5Y-W-25K= | L-ISE-W-3UPG-25K= | L-ISE-W-UPG-25K= |
50,000 | 50K Endpoints | L-ISE-BSE-50K= | L-ISE-ADV3Y-50K= | L-ISE-ADV5Y-50K= | L-ISE-AD3Y-W-50K= | L-ISE-AD5Y-W-50K= | L-ISE-W-3UPG-50K= | L-ISE-W-UPG-50K= |
100,000 | 100K Endpoints | L-ISE-BSE-100K= | L-ISE-ADV3Y-100K= | L-ISE-ADV5Y-100K= | L-ISE-AD3Y-W-100K= | L-ISE-AD5Y-W-100K= | L-ISE-W-3UPG-100K= | L-ISE-W-UPG-100K= |
