Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Ise with base license

Hi everyone,

trying to make sense of ISE licensing. I'll able to use Identity store with static MAC address (manualy added) in authorization policy.

My question is that able to be accomplished via base licensing or is  that considered posturing/profiling?

Thanks all!

Iarno Pagliani

Everyone's tags (3)
6 REPLIES

Ise with base license

Iarno,

Your understanding is correct. Once a device is granted access using dynamic profiling then that is considered amd advanced feature.

Thanks.

Tarik 

Tarik Admani *Please rate helpful posts*

Ise with base license

hello,

posturing/profiling are covered under Advance license only, Base license doesn’t have this functionality.

New Member

Re: Ise with base license

You can manually add MAC addresses to an identity group, and then reference that group in the authorization policy. This is a static entry and should NOT use an advanced license.
If you have a mass of mac addresses to add, you can load them in to a template excel spreadsheet and import them in one go.


Sent from Cisco Technical Support iPhone App

Silver

Re: Ise with base license

Profiling is the feature of advance licensing

Re: Ise with base license

Hello Iarno Pagliani,

For your understanding

 

License Type

 

Features Supported

 

Deployment Type Supported

 

License Prerequisite

 

License Term(s)

 

Base License

 

AAA

Guest Provisioning

Link Encryption Policies

 

Wired

Wireless

VPN

 

-

 

Perpetual

 

Advanced License

 

Device Onboarding/Provisioning

Device Profiling and Feed Service*

Host Posture

Security Group Access

Integrated Vendor MDM Support*

 

Wired

Wireless

VPN

 

Base License

 

3- and 5-Year Terms

 
Cisco Employee

Ise with base license

The Base License is consumed whenever an authentication notification is  received by Cisco ISE. A single Advanced License is consumed when any  one or more of the following services or conditions are applied to the  endpoint session:

Posture

Security Group Tag assignment

Authorization using profile information

Endpoint is registered in the MyDevices Portal

810
Views
0
Helpful
6
Replies