Basic ISE Licensing question

Hi,
Just a question on ISE license consumption.
If a user logs in and gets authenticated (user authentication) via ISE on a device that is already authenticated (device authentication), does it consume 2 licenses, one for the device and one for the user?
This is nowhere clearly told in any cisco documentation.
Can anybody help me clarify this?
Thank you,
Mohan

The base package includes all of the base services required to enable 802.1X, Guest, and Monitoring and Troubleshooting. The advanced package includes Posture, Profiler, and Security Group Access services.
Cisco ISE is bundled with a licensing mechanism that has the following important features:
•Built-in License—Cisco ISE comes with a built-in evaluation license, which is valid for 90 days. The evaluation license includes both base and advanced packages and limits the number of endpoints to 100 for both the base and advanced packages. Therefore, it is not required to install a regular license immediately upon installation.
•Central Management—Licenses are centrally managed by the ISE administration node. In a distributed deployment, where two ISE nodes assume the Administration persona (primary and secondary), upon successful installation of the license file, the licensing information from the primary Administration node is propagated to the secondary Administration node. So there is no need to install the same license on each Administration node within the deployment.
•Concurrent Endpoint Count—The Cisco ISE license includes a count value for base and advanced packages, which restricts the number of endpoints that use those services. The count value is the number of endpoints across the entire deployment that are concurrently connected to the network and accessing the service.
Concurrent endpoints represent the total number of supported users and devices. An endpoint can be any combination of users, personal computers, laptops, IP phones, smart phones, gaming consoles, printers, fax machines, or other types of network devices.
IMPORTANT : - Alarm is generated when the soft limit of endpoints is crossed and there is no functional impact on the users. To avoid service disruption, Cisco ISE continues to provide services to endpoints that exceed license entitlement. However there are plans to implement a hard limit on this soon.
Regards,
Jatin Katyal
** Do rate helpful posts **

Similar Messages

  • Cisco ise licensing question

    Hi there,
    I got a ISE 3315 with an IP-Plus license on it. Now I need to install a Wireless advanced license, but I got an error when trying. I've read that the wireless license doesn't need the ip-base one but I can't remove it?
    Any ideas?
    Thanks, Norbert
    Sent from Cisco Technical Support iPhone App

    you can't edit the license file.  If you think it's wrong open a TAC case with the licensing team and they will work with you to cut the correct license.
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • Changing ISE hostname with application reset-config ise - license question

    Hello,I need to change the hostname of our ISE install.  TAC stated I need to use the command of application reset-config ise to do so.  I was wondering if my old license files can be reused or do I need to get new ones from Cisco.  I have a case open, but this work is being done this evening so I need an answer as soon as possible. Also, if any of you have any tips or tricks to get me through this process, I would love hearing them.Thank you!

    Thank you for the quick reply. I would just like to clarify that I can use the license files that were sent to me when we initially purchased the product.  I have to do the work tonight and don't want to hose my installation if I need to get new license files from Cisco.

  • Instant Client SQL*Plus License Question

    Can anyone shed some light on a license question for me? (I know that most license questions are for Oracle Sales to handle, but this involves a supposedly free product.)
    I want to use SQL*Plus with the Instant Client in a production environment, but I am not sure whether I am entitled to. Does Instant Client "support" SQL*Plus only in the sense that if I already own a license for SQL*Plus I can use it with the Instant Client, or is the Instant Client SQL*Plus package also truly free to deploy and use?
    The download page has links to download a basic Instant Client, plus several optional packages, one of which is SQL*Plus. However, the FAQ does not tell me whether the optional packages (specifically SQL*Plus) is also free to deploy and use in a production environment, and I could not find any other helpful document.
    The FAQ says that "Instant Client is FREE for anyone to use in a development or production environment." It also says immediately following that "Instant Client can be used to run your OCI, OCCI, Pro*C, JDBC, and ODBC applications without installing a full Oracle Client. In addition, Instant Client supports SQL*Plus." [emphasis mine]
    I would appreciate any help on this.
    Thanks in advance,
    Anthony

    Why don't you call Oracle sales? I guess they'll be happy to answer your question.
    Yours,
    Laurenz Albe

  • ISE license for TrustSec

    Hello,
    I want to know  does ISE with Plus-License support  TrustSec features ?     On the TrustSec 5.0 document, it is mentioned that you must have ISE Advance-License for TrustSec support. but  on other-hand on ISE Licensing-datasheet it is written Plus-License (Provides context about endpoints for more detailed access policies).   as per bellow table:
    ISE License Package
    Focus
    Perpetual/Subscription (Terms Available)
    Notes
    Base
    Secured access
    Perpetual
    Plus
    Provides context about endpoints for more detailed access policies
    Subscription (1, 3, or 5 years)
    Does not include Base services; Base licenses are required to install Plus licenses.
    Advanced
    Provides context and compliance details about endpoints for more detailed access policies
    Subscription (1, 3, or 5 years)
    Does not include Base services; Base licenses are required to install Advanced licenses
    http://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/datasheet-c78-730772.html
    Please let me know should I order Advanced or Plus License?      if Plus has this capability will be good for me because of its License pricing
    Thanks,

    At the beginning, there were only the Base- and Advanced licenses. There you needed Advanced for nearly everything that goes beyond basic Authentication and Authorization. In newer versions (starting 1.2.1 and one of ne newer 1.2.0 patch-levels), the plus license was introduced. And many Advanced-features were moved to Plus. As you will probably directly start with a newer version where the new licenses are used, you'll be fine with "Plus".

  • ISE licenses and Profiling service

    Hi,
    I tried to find proper explanation of how ISE licenses are used but I am still not sure of one thing.
    With the Plus license, when the profiling service is turned on; is the number of endpoints consumed from the Plus license for every endpoint that has been profiled and successfully authenticated or the number will be consumed from Base license first ?

    A successfully Authenticated device draws from the Base License.
    A Profiled device draws from the Plus License.
    A successfully Authenticated profiled device draws from both. 
    This is why you need at least as many Base as Plus or Apex Licenses.
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Lumira Server for BI Platform and Team/Edge consumption & licensing question

    Hi.  I have a few questions.
    Question 1:
    From my reading, I've heard that Lumira Edge/Team server may not be a part of BI-Suite License.  I read a Lumira Server ASUG Webcast recap by Tammy Powlas here (SAP Lumira Server for Teams Roadmap ASUG Webcast) over the weekend and one of the Q&A questions struck me:
    Q: Is this included with the BI Suite license from SAP?
    A: Lumira Server for Teams (Edge Edition) is not covered under BI Suite License. However, Lumira Server for BI Platform (RTC Planned in April) is covered under BI Suite licenses
    In a separate conversation late 2014, I thought I'd heard that Lumira Team/Edge server was supposed to be usable by BI Suite licensed customers, but it sounds like I'm mistaken?
    Question 2:
    Next, the second part of the statement gave me hope:
    However, Lumira Server for BI Platform (RTC Planned in April) is covered under BI Suite licenses
    I then looked at the Lumira Deployment Options for Departments Part 1 – ASUG Webcast by Tammy Powlas to get some more information on Lumira Server for BI Platform.  This slide gave me some hope (emphasis mine in green):
    But then I see some more information a little later:
    Is this slide to imply that the version without HANA (or HANA XS) for BI Platform will only really just serve as a user rights management and Lumira document repository?  And that if I want to view a Lumira document, I must still open from the Lumira Desktop client?
    It was suggested I start a new discussion thread to ask this licensing question about a product that's not out yet (but the slide says it's GA so I'm still confused) so here I am with my discussion thread!
    Hopefully someone can make me less confused.  I'm hoping the answer is as a BI-Suite customer that we do not have to make a decision to either invest in new Edge/Team licenses or buy HANA XS hardware to establish a beachhead of Lumira usage in our organization.  We've been struggling with promoting Lumira and the sharing piece has been the sore spot.

    Hi Michael
    You are right, it is confusing...
    I think it will be better to contact sales to get this explained as opposed to technical support people that monitor this SCN Space.
    Sales ph: 866-681-3435, 1-800-677-7271
    Worldwide Office Locations | SAP
    - Ludek
    Senior Support Engineer AGS Product Support, Global Support Center Canada
    Follow me on Twitter (#SAPLumira)
    Got Enhancement ideas? Use the SAP Idea Place 

  • ISE license enforcement alarms

    Getting the following alarm from my ISE:
    Cause:
    Base License Enforcement
    Details:
    Base concurrent users exceed license allowable count
    Currently only using 1656 out of 2000 base licenses so I'm not sure what the issue is. Running 1.1.2.145 patch 3.

    Hello Tom,
    As I am unclear about your issue , to make it more clear can you tell me the exact base licenses  that you have purchased for your endpoints.
    can you send me the BOM regarding  ISE licenses  that you have purchased.

  • CS5 Student License Question

    Licensing question:
    In 2011, I purchased a student license to CS5 for my mac.  I have installed it on one laptop that I am the primary user of.  The laptop has two user logins, mine and my husbands.
    Can my husband use CS5 on the computer on an occassional basis (either through my username or his) and still be okay from a licensing point of view?  There are several questions that hint at this, but I can't find a clear answer.  I've read the EULA, but I'm still confused whether this is permissable or not.
    Thanks for any help.

    That's into the area of legal interpretation, but you don't need to overthink it. You may have purchased the license, but technically the activation is per computer, is it not? So one could simply assume that this is perfectly intended or at least within the freedom that the EULA provides... It's not like you're letting your neighbors use it for a buck an hour, or is it?
    Mylenium

  • BO XIR2 Licensing Question

    Was hoping if someone could help me out with a licensing question I have. I am trying to understand how BO licensing works.
    I think it would be easier if I asked the question through an example.
    The scenario is a situation where we have a standard BO XIR2 enterprise installation with an app server, db server and web server.
    1. The app server is a normal BO XIR2 installation
    2. The web server is also as from a BO XIR2 installation.
    3. The db server runs the data store and audit module is on in the db.
    4. The following report types are to be used by the end user
        4a. Crystal Reports
        4b. Web Intelligent reports (View, drill down etc)
        4c. Desktop Intelligence report (View, drill down etc)
    5. The development box is the same setup in which the 10 developers should have access to have access to these build the universes, crystal, webi and deski reports.
    6. The prod environment will be used by 50 users who should be able to access webi crystal and deski reports.
    7. These users should also be able to create custom webi reports
    Since the licensing for BO is a bit different, can someone please help understand all the different types of licenses required for this setup?

    BO licensing is pretty straight forward, but you should speak to a sales rep for particulars. Generally from the server we have 3 types CPU (in which case everything you stated would be supported), Named Users (in which case you would need 1 per user logging in) and concurrent users (which would require enough licenses to support the maximum of concurrently logged on users).
    The slow response is likely due to the US thanksgiving holiday, I'm sure more folks will be back next week.
    Regards,

  • Basic Hyperion Workspace question

    Is there any way to Drill-Down to data by double-clicking on the chart item in Hyperion Workspace? I can do this in Hyperion Reporting Studio.

    hi all,Hi Neerav
    I have very basic clone database question
    If i create database A and clone database B using A...
    I want to know that any operation done on A will be automatically done on Cloned database B.Oops....Now you're asking about rocket science. Sorry, I don't know.
    I know about some basics:
    Streams or Replication--> Which can give you data on B in read-write mode.
    DR--> For safeguarding your database and B will work as DR solution.
    Hope u understandNo, please make us understand.
    Regards,
    S.K.

  • Basic recording/feedback question

    I'm recording basic vocals against accompaniment tracks using an APOGEE ONE and Audio-Technica 40 series AT8449 condenser mic. I use only headphones, no external speakers.
    If I record with "monitoring" on I constantly battle feedback/distortion, especially on songs with a wide dynamic range. When the feedback protection kicks in the message indicates that I'm getting feedback through my external speakers (which I don't have), I can minimize the problem by turning "monitoring" off but I lose the reference vocal. I know I must be overlooking something very simple. Any help is appreciated.

    hi all,Hi Neerav
    I have very basic clone database question
    If i create database A and clone database B using A...
    I want to know that any operation done on A will be automatically done on Cloned database B.Oops....Now you're asking about rocket science. Sorry, I don't know.
    I know about some basics:
    Streams or Replication--> Which can give you data on B in read-write mode.
    DR--> For safeguarding your database and B will work as DR solution.
    Hope u understandNo, please make us understand.
    Regards,
    S.K.

  • Basic PDF/SSL Question

    Okay, I know this is a basic question, and I'm not sure if this is really where I should be posting it, but maybe someone out there has experience with this.
    I have a PDF form sitting on a secure server.  I have it set up to email the completed PDF back to our company when the user clicks the SUBMIT buttton.  Whether or not the PDF is secure coming back to us would be dependent on the email server the user uses - not that the form sits in a secure area on our server or that the PDF is security settings are set, correct?
    Any input appreciated.
    Thanks
    Q

    hi all,Hi Neerav
    I have very basic clone database question
    If i create database A and clone database B using A...
    I want to know that any operation done on A will be automatically done on Cloned database B.Oops....Now you're asking about rocket science. Sorry, I don't know.
    I know about some basics:
    Streams or Replication--> Which can give you data on B in read-write mode.
    DR--> For safeguarding your database and B will work as DR solution.
    Hope u understandNo, please make us understand.
    Regards,
    S.K.

  • Basic wifi service question

    basic wifi service question
    A Windows-using friend of mine subscribes to a service from Verizon that is sort of like a cell phone for a computer - wifi service that you can access from theoretically anywhere, for something like $60 a month -
    as far as I can determine, one CAN get this for Mac but ONLY if you have a 15 or 17 inch laptop with PC slots - unless I am missing something. It requires a special kyocera card.
    Another company, T-Mobile, offers a similar service, but with no MAC access at all.
    So my question is: is there a similar service, wi-fi access theoretically anywhere (or even just anywhere in New York City) ? Hopefully with just the regular mac airport card and not any additional special hardware?
    Thanks!
    Will

    Hello WillFriedwald2
    The kind of service your describing is probably a 3G and GPRS service.
    Phone companies now offer mobile high speed connections using EDGE technology or GPRS2 and supply a 3G or GPRS PCMCIA card.
    However some companies are now offering a package whereby you get high speed 3g and gprs and also wifi.
    So to use this service on a laptop that has no PC card slot you need to get a 3G or GPRS2 phone that supports blue tooth then you can connect your laptop to the phone over bluetooth and therefore access high speed internet.
    But if you had a desktop mac such as a G5 you would be better just getting a regular cable or dsl connection in your home and invest in a wireless router.

  • Basic JDBC transactional question

    Hello all,
    I have (what I believe) is a basic transactional JDBC question.
    Here's what I want to do:
    begin transaction
    select a row from a table where (some condition).
    that row may or may not exist.
    if the row exists: update the row
    else if the row does not exist, insert a new row
    end transaction
    I want this entire thing to be atomic .. I don't want the select to complete, then have something else come in there before the update/insert takes place.
    I'm using MySQL .. I seem to remember hearing about some proprietary MySQL command which would do a SELECT + UPDATE atomically .. which would be fine, but I can't find it.
    Wrapping this with a row-level lock would be fine too .. I'm just not sure how to do that in JDBC.
    Thanks!
    -d

    By thte way, and not that it helps the orignal poster, who's using MySQL, but Oracle has a proprietary MERGE statement that does "insert or update" in one go. For example:
    MERGE INTO bonuses D
       USING (SELECT employee_id, salary, department_id FROM employees
       WHERE department_id = 80) S
       ON (D.employee_id = S.employee_id)
       WHEN MATCHED THEN UPDATE SET D.bonus = D.bonus + S.salary*.01
         DELETE WHERE (S.salary > 8000)
       WHEN NOT MATCHED THEN INSERT (D.employee_id, D.bonus)
         VALUES (S.employee_id, S.salary*0.1)
         WHERE (S.salary <= 8000);

Maybe you are looking for