Cisco ISE Session Counts

[Irakli Gvishiani]

Hello, We would like to purchase Cisco ISE and planning use it for TACACS, Radius Authentication for Corporate SSID and also for Guest SSID (For Guest SSID we would like to use CWA, probably self-registring type). 

As I undesrtand We need Device Administration and Essential Licenses. But what about session counts? How ISE will count sessions in our scenario? 

Thanks

[ammahend · Accepted solution]

for tacacs (device administration license) you need 1 license per psn, irrespective of total number of tacacs sessions (that the hardware or VM can support).

for radius the essential license count should be equal to total consecutive number of devices that will authentication through ise. when device disconnects the license is added back to the pool. Essential license is needed per deployment unlike device administration which is needed 1 per psn that you will use for tacacs. 

[Irakli Gvishiani]

Thanks for your response, ammahend.

Just for the clarification, for example, if I have 200 devices associated with Corporate SSID and 500 devices with Guest SSID (in case of CWA) it's means that I need to purchase 700 sessions? (1-999 Session Bands)

[ammahend]

Correct, you also have flexibility to add more licenses as your endpoint count grow.