Trials and demos
How to buy

Cisco Identity Services Engine (ISE)

See everything. Control what happens next.

Turn identity into your network control plane with visibility, context, and policy enforcement across every connection. Every new installation includes a 90-day evaluation license for up to 100 endpoints.

Download ISE software Read At-A-Glance
Overview License Resources Demos
Three types of Cisco ISE licenses

Cisco ISE licensing at a glance

Cisco ISE has 3 types of licenses – platform license for virtual or infrastructure-as-a-service (IaaS)-based deployments, feature license which is organized into three categories – essentials, advantage and premier, and device admin license for network device admin access when using TACACS+

Read details

Build zero trust at every stage

ISE Essentials

Verify who and what connects

For organizations that need basic visibility, along with foundational network access control capabilities.

What you get

  • Visibility into all users and devices across wired, wireless, and VPN
  • Secure onboarding (employees, guests, IoT)
  • Consistent access policy across your network

Recommended

ISE Advantage

Control what they can access

For organizations looking to secure diverse users and devices using identity-based segmentation.

What you get

  • Device profiling and classification
  • Identity-based segmentation (TrustSec/SGT)
  • Integration with security ecosystem (pxGrid)

ISE Premier

Enforce compliance and contain threats

For organizations that require continuous device trust, compliance enforcement, and automated threat containment.

What you get

  • Device posture validation (health checks)
  • Compliance enforcement (Mobile Device Management/Enterprise Mobility Management ntegration)
  • Automated threat containment

Zero trust is a journey, not a feature

Cisco ISE enables security at every stage, and progression aligns with the security maturity model below.

Key benefitsFeaturesEssentialsAdvantagePremier
Identity verification and enforcementAAA and 802.1XAvailable Available Available 
Guest (hotspot, self-regulated, sponsored)Available Available Available 
Easy Connect (passive ID)Available Available Available 
Context sharing, segmentation and adaptive network controlProfilingNot available Available Available 
Bring-your-own-device (BYOD)Not available Available Available 
Context in or out using Cisco Platform Exchange Grid (pxGrid), pxGrid Cloud, and pxGrid DirectNot available Available Available 
User-defined networkNot available Available Available 
Cisco TrustSec (group-based policy)Not available Available Available 
Endpoint analytics visibility and enforcementNot available Available Available 
Cisco Rapid Threat Containment network control)Not available Available Available 
CompliancePostureNot available Not available Available 
Mobile Device Management (MDM) complianceNot available Not available Available 
Threat-Centric Network Access Control (TC-NAC)Not available Not available Available 
View licensing guide

Cisco ISE licensing

Choose the level of control that your network needs

Gain the flexibility to start with securing network access and scale to identity-based segmentation and zero-trust enforcement across your hybrid environment.

Download ISE software Read At-a-Glance