Hi @sv7
Umbrella is licensed per user, see here https://docs.umbrella.com/deployment-umbrella/docs/monthly-dns-query-average:
Cisco Umbrella DNS Security packages are subject to a Monthly DNS Query Average limit of up to 3,000 DNS queries per Cov...
ISE 3.2 allows to use EAP-TLS with AzureAD might be worth to check it out.Release Notes https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/release_notes/b_ise_32_RN.html#Cisco_Concept.dita_ca1dd90a-c40f-4c83-9994-da8e5b4536ca
BRRick
For any additional PSN you deploy (if virtual) you need to get a VM License (either VMS or VMC - see ordering guide).It it not supported to go with 2x PSN, and 2x PSN,PAN,MNT. You need a medium deployment with separate PSN nodes from your PAN/MNT nod...