cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.4 Patch 7 is available! View the ISE 2.4 Release Notes and Download!
191
Views
0
Helpful
3
Replies
Highlighted
Cisco Employee

ISE Guest flow with guest user type license required

ISE guest wireless use case consumes a base license: that we know.

If the guest wireless use case now leverages any guest user type (IdentityGroup:Name equals User Identity Groups: GuestType_Contractor), is now a Plus license required?

 

thanks much,

David D.

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE Guest flow with guest user type license required

I believe this is because you’re using the Remember me flow. This doesn’t seem right. Please open a defect and tac case and I will escalate it to the Product managers to see what can be done. Send me a direct PM

3 REPLIES 3
VIP Engager

Re: ISE Guest flow with guest user type license required

Nope. EndpointIdentity Groups that you create yourself (or relate to GuestType) don't consume Plus licenses.  Plus license only consumed when you use a Group that relates to Profiling (e.g. if device is an Apple device).

Cisco Employee

Re: ISE Guest flow with guest user type license required

Hi Arne,

Thanks much for your reply.  You are correct.  However, my particular use case leverages IdentityGroup:Name (as described in the ISE Guest Prescriptive Deployment Guide) and in this case, Plus licenses ARE expected to be consumed.  My reference is the note for Plus licenses in Table 1 of the new ISE Adminstrator guide. https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_0110.html

 

This must be a new change; eh?

 

best regards,

David D.

Cisco Employee

Re: ISE Guest flow with guest user type license required

I believe this is because you’re using the Remember me flow. This doesn’t seem right. Please open a defect and tac case and I will escalate it to the Product managers to see what can be done. Send me a direct PM