Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

License for ISE profiling feature

Hi

 

  I am going to do voice phone authentication through MAB. I have heard that with te feature called profiling. ISE automatically collects the information of all the mac address of the VOIP phones (cisco as well as different vendor).

 

In order to enable the feature will I have to take Plus license or advance License and what will be the part number for it.

 

 

Minakshi

4 REPLIES
Cisco Employee

In addition to what Mohanak

In addition to what Mohanak said, you can also use EAP-TLS 802.1x based authentication with your Cisco phones by utilizing the MIC (Manufacturer Installed Certificates). This will be cheaper and more secure. 

 

Thank you for rating helpful posts!

Community Member

If you are happy with

If you are happy with manually loading the MAC addresses of the phones, then you can make do with base license. It's not the be all and end all of security, but if your policy just deploys a voice LAN and restricts access to that, then it reduces the risk. The phones will still have to register with callmanager before they will work.

 

Cisco Employee

if the device profiled

if the device profiled condition is used in authorization policy then only plus/advanced license consumed

149
Views
0
Helpful
4
Replies
CreatePlease to create content