Cisco ISE HW and VM Requirements

[soutec_us]

Hi, I have the following information:

• 200 Endpoints
• ISE would be virtualized in two VMs for redundancy, primarily we want to have control over the workstations and laptops.
• We are not using Wireless at this moment.

What are the HW and VM requirements for this case?

What kind of license I need for 200 Endpoints?

Do I need another license for the redundancy?

[Dustin Anderson · Accepted solution]

here is the HW/VM requirements.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/install_guide/b_ise_InstallationGuide22/b_ise_InstallationGuide22…

Here is licensing and ordering.

https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

Now, here is what I can tell you from the info you provided.

You would buy 2 VM licenses. there is no redundancy license.

VM requirement is 16GB RAM, 4 cores of at least 2GHz. 200GB HD. (There are different HD recommendations, but 200GB should be fine for only 200 hosts)

You have to mimic an appliance in a VM, so you mimic a SNS-3415 or SNS-3515 Both support 7500 concurrent connections, so will be more than enough for your application.

Licensing is another can of worms.

Minimum, you would need base licenses for concurrent connections. licenses are freed up after a short time of the device not being connected.

Depending on what you want to do, you could end up needing plus and apex licenses. Base is a permanent license, but plus and apex are subscriptions for 1, 3, or 5 years.