Ise with base license

Unanswered Question
Sep 19th, 2012
User Badges:

Hi everyone,

trying to make sense of ISE licensing. I'll able to use Identity store with static MAC address (manualy added) in authorization policy.

My question is that able to be accomplished via base licensing or is  that considered posturing/profiling?

Thanks all!

Iarno Pagliani

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Tarik Admani Wed, 09/19/2012 - 04:17
User Badges:
  • Green, 3000 points or more


Your understanding is correct. Once a device is granted access using dynamic profiling then that is considered amd advanced feature.



Naveen Kumar Mon, 04/08/2013 - 17:47
User Badges:
  • Silver, 250 points or more


posturing/profiling are covered under Advance license only, Base license doesn’t have this functionality.

bikespace Fri, 09/06/2013 - 07:41
User Badges:

You can manually add MAC addresses to an identity group, and then reference that group in the authorization policy. This is a static entry and should NOT use an advanced license.
If you have a mass of mac addresses to add, you can load them in to a template excel spreadsheet and import them in one go.

Sent from Cisco Technical Support iPhone App

kaaftab Fri, 09/06/2013 - 17:41
User Badges:
  • Silver, 250 points or more

Profiling is the feature of advance licensing

Saurav Lodh Fri, 09/06/2013 - 21:53
User Badges:
  • Gold, 750 points or more

Hello Iarno Pagliani,

For your understanding


License Type


Features Supported


Deployment Type Supported


License Prerequisite


License Term(s)


Base License



Guest Provisioning

Link Encryption Policies










Advanced License


Device Onboarding/Provisioning

Device Profiling and Feed Service*

Host Posture

Security Group Access

Integrated Vendor MDM Support*






Base License


3- and 5-Year Terms

Venkatesh Attuluri Sun, 09/08/2013 - 07:19
User Badges:
  • Cisco Employee,

The Base License is consumed whenever an authentication notification is  received by Cisco ISE. A single Advanced License is consumed when any  one or more of the following services or conditions are applied to the  endpoint session:


Security Group Tag assignment

Authorization using profile information

Endpoint is registered in the MyDevices Portal


This Discussion