cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

157
Views
0
Helpful
2
Replies
Beginner

Licensing confusion

Hi all, 

 

I have attempted to understand licensing for the last couple of days but seem to be reading conflicting posts and documentation

 

We have ISE 2.4 with base licenses only currently. 

 

We also have AnyConnect with Apex licenses that are using the ISE server to AuthN/AuthZ.

 

I have been asked to understand what would be required in order enable posture checking with ISE. 

 

Do I need to have an AnyConnect Apex license as well as an ISE Apex license to match?

 

Also I don't really understand the consumption of licenses. 

 

In the documentation, it states that a plus license is consumed before an apex license. 


Does this mean i need to have an equal amount of plus and apex licenses to be able to use Apex functionality?

 

Im happy to read any docs if anyone has anything that is concise

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Mentor

Re: Licensing confusion

For posturing, you need both the APEX license on the ISE and for AnyConnect. The ISE-license gives you the feature on the server-side, the AC license allows you to use the "better" endpoint agent. Without the AnyConnect APEX license, you still could use the legacy client.

This feature does not consume a PLUS license, you don't need to have one for posturing, but if you want to enable other feastures like profiling, you also need PLUS licenses.

View solution in original post

2 REPLIES 2
VIP Mentor

Re: Licensing confusion

For posturing, you need both the APEX license on the ISE and for AnyConnect. The ISE-license gives you the feature on the server-side, the AC license allows you to use the "better" endpoint agent. Without the AnyConnect APEX license, you still could use the legacy client.

This feature does not consume a PLUS license, you don't need to have one for posturing, but if you want to enable other feastures like profiling, you also need PLUS licenses.

View solution in original post

Highlighted
Beginner

Re: Licensing confusion

Thanks for clearing that up for me