Cisco ISE functionally and license

[Roger Base]

HI. 

I wanna configure the following on Cisco ISE 1.2.1.

Self-registration portal for guests (SSID: guests)

802.1x user certificate check (Cisco NAM supplicant) for employees (SSID: Corporate) (EAP-TLS)

Self provisioning portal (to deploy BYOD certificate and give access for BYOD devices) for BYOD devices (SSID: Corporate) (PEAP, MSHAPv2)

Can I configure these things with PLUS license or do I need Adv or Wireless? I am not sure if one of these requires profiling functionally.

[Jatin Katyal]

With plus license all the above items should work.

Here is what plus license supports:

• Bring Your Own Device (BYOD)
• Profiling
• Endpoint Protection Service (EPS)
• TrustSec SGT
• For more info, refer ISE license section:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html#41012

Regards,

Jatin Katyal

**Do rate helpful posts**

[Roger Base]

Yes. but will my implementation (as specified) require posture?

[Saurav Lodh]

Profiling services on ISE allows you to create authorization rules based on device profiles , you are looking for such services? Also , this Plus license would require Base license also.

[Roger Base]

salodh,

Check my requirements in the first post.

Self-registration portal for guests (SSID: guests)

802.1x user certificate check (Cisco NAM supplicant) for employees (SSID: Corporate) (EAP-TLS)

Self provisioning portal (to deploy BYOD certificate and give access for BYOD devices) for BYOD devices (SSID: Corporate) (PEAP, MSHAPv2) (diffrent self provisiong for diffrent devices, IOS, Android, etc)

[Venkatesh Attuluri]

no need of advanced license  you can achieve the above with plus license (guest,802.1x)