Ise with base license

Unanswered Question
Sep 19th, 2012

Hi everyone,

trying to make sense of ISE licensing. I'll able to use Identity store with static MAC address (manualy added) in authorization policy.

My question is that able to be accomplished via base licensing or is  that considered posturing/profiling?

Thanks all!

Iarno Pagliani

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Tarik Admani Wed, 09/19/2012 - 04:17


Your understanding is correct. Once a device is granted access using dynamic profiling then that is considered amd advanced feature.



Naveen Kumar Mon, 04/08/2013 - 17:47


posturing/profiling are covered under Advance license only, Base license doesn’t have this functionality.

bikespace Fri, 09/06/2013 - 07:41

You can manually add MAC addresses to an identity group, and then reference that group in the authorization policy. This is a static entry and should NOT use an advanced license.
If you have a mass of mac addresses to add, you can load them in to a template excel spreadsheet and import them in one go.

Sent from Cisco Technical Support iPhone App

Saurav Lodh Fri, 09/06/2013 - 21:53

Hello Iarno Pagliani,

For your understanding


License Type


Features Supported


Deployment Type Supported


License Prerequisite


License Term(s)


Base License



Guest Provisioning

Link Encryption Policies










Advanced License


Device Onboarding/Provisioning

Device Profiling and Feed Service*

Host Posture

Security Group Access

Integrated Vendor MDM Support*






Base License


3- and 5-Year Terms

Venkatesh Attuluri Sun, 09/08/2013 - 07:19

The Base License is consumed whenever an authentication notification is  received by Cisco ISE. A single Advanced License is consumed when any  one or more of the following services or conditions are applied to the  endpoint session:


Security Group Tag assignment

Authorization using profile information

Endpoint is registered in the MyDevices Portal


This Discussion

Related Content