Cisco ISE Licenses
Cisco ISE licensing provides the ability to manage the application features and access, such as the number of concurrent endpoints that can use Cisco ISE network resources.
To maximize economy for customers, licensing in Cisco ISE is supplied in different packages as Base, Plus, Apex, and Mobility Upgrade.
All Cisco ISE appliances are supplied with a 90-day Evaluation license. To continue to use Cisco ISE services after the 90-day Evaluation license expires, and to support more than 100 concurrent endpoints on the network, you must obtain and register Base licenses for the number of concurrent users on your system. If you require additional functionality, you will need Plus and/or Apex licences to enable that functionality.
Licenses are uploaded to the Primary PAN and propagated to the other Cisco ISE nodes in the cluster. Licenses are centrally managed by the PAN. If you have two PANs deployed in a high-availability pair, obtain a license based on the hardware IDs (UIDs) of both the Primary and Secondary PANs. After you obtain the license, add it only to the Primary PAN. The license gets replicated to the Secondary PAN.
After you install the Cisco ISE software and initially configure the appliance as the Primary PAN, you must obtain a license for Cisco ISE and then register that license. You register all licenses to the Cisco ISE Primary PAN via the Primary and Secondary PAN hardware UID. The Primary PAN then centrally manages all the licenses that are registered for your deployment.
Cisco recommends installing both Base and Plus or Apex licenses at the same time.
-
Using a Plus or Apex license requires also using a Base license. However, you do not need a Plus license in order to have an Apex license or vice versa, since there is no overlap in their functionality.
-
When you install a Base or Mobility Upgrade license, Cisco ISE continues to use the default Evaluation license as a separate license for the remainder of its duration.
-
You cannot upgrade the Evaluation license to an Plus and/or Apex license without first installing the Base license.
-
Cisco ISE allows you to use more Plus and/or Apex licenses on the system than Base licenses. For example, you can have 100 Base licenses and Plus licenses.
-
When you install a Mobility Upgrade license, Cisco ISE enables all Wired, Wireless, and VPN services.
ISE License Packages |
Perpetual/Subscription (Terms Available) |
ISE Functionality Covered |
Notes |
Base |
Perpetual |
|
|
Plus |
Subscription (1, 3, or 5 years) |
|
Does not include Base services; a Base license is required to install the Plus license. |
Apex |
Subscription (1, 3, or 5 years) |
|
Does not include Base services; a Base license is required to install the Apex license. |
Mobility |
Subscription (1, 3, or 5 years) |
Combination of Base, Plus, and Apex for wireless and VPN endpoints |
Cannot coexist on a Cisco PAN with Base, Plus, or Apex Licenses. |
Mobility Upgrade |
Subscription (1, 3, or 5 years) |
Provides wired support to Mobility license |
You can only install a Mobility Upgrade License on top of an existing Mobility license. |
Device Administration |
Perpetual |
TACACS+ |
A Base or Mobility license is required to install the Device Administration license. |
Evaluation |
Temporary (90 days) |
Full Cisco ISE functionality is provided for 100 endpoints. |
All Cisco ISE appliances are supplied with an Evaluation license. |