09-19-2012 02:55 AM - edited 03-10-2019 07:33 PM
Hi everyone,
trying to make sense of ISE licensing. I'll able to use Identity store with static MAC address (manualy added) in authorization policy.
My question is that able to be accomplished via base licensing or is that considered posturing/profiling?
Thanks all!
Iarno Pagliani
09-19-2012 04:17 AM
Iarno,
Your understanding is correct. Once a device is granted access using dynamic profiling then that is considered amd advanced feature.
Thanks.
Tarik
04-08-2013 05:47 PM
hello,
posturing/profiling are covered under Advance license only, Base license doesn’t have this functionality.
09-06-2013 07:41 AM
You can manually add MAC addresses to an identity group, and then reference that group in the authorization policy. This is a static entry and should NOT use an advanced license.
If you have a mass of mac addresses to add, you can load them in to a template excel spreadsheet and import them in one go.
Sent from Cisco Technical Support iPhone App
09-06-2013 05:41 PM
Profiling is the feature of advance licensing
09-06-2013 09:53 PM
09-08-2013 07:19 AM
The Base License is consumed whenever an authentication notification is received by Cisco ISE. A single Advanced License is consumed when any one or more of the following services or conditions are applied to the endpoint session:
•Posture
•Security Group Tag assignment
•Authorization using profile information
•Endpoint is registered in the MyDevices Portal
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: