Firepower and ISE Passive ID license requirement

[zacakg]

Hello,

I want to integrate ISE and FMC for passive authentication. I know that I need advantage license for pxgrid and sgt. But what is the exact number of license requirement for ISE?

Regards,

[balaji.bandi]

what is the exact number of license requirement for ISE?

check this document can help you :

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/control_users_with_ise_ise_pic.html#id_59320

check ISE PIC License :

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/pic_admin_guide/PIC_admin26/PIC_admin26_chapter_01.html#concept_DE1C38E055794B198ED352D1528B5182

[zacakg]

Hi Balaji,

We already have ISE. I just wanted to know how much advantage licenses needed for example 100 AD user and 5 AD Group on this integration.

Regards

[Marvin Rhoads · Accepted solution]

From what I can tell based other discussions, as well as consulting the current ISE Licensing Guide, pxGrid sharing out of identity information gleaned solely from PassiveID DOES NOT consume or require an ISE Advantage license since the "Trigger of license consumption" is "An endpoint with a RADIUS session connects over pxGrid".

No RADIUS session = no license consumed.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#34Licenseconsumption

I've asked the ISE licensing PM to confirm my understanding.

[Aref Alsouqi]

If you already have ISE then you can configure ISE-PIC without any additional licenses as already mentioned by @Marvin Rhoads.