generated: '2026-08-19'
method: searched
source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-656177.html
docs: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-656177.html
model: endpoint-subscription — priced on the maximum number of active endpoints expected to connect concurrently on any given
  day; tiers are nested, each higher tier including everything below it
currency: null
prices_published: false
note: 'Cisco publishes the ISE Licensing Guide openly — the tiers, the SKUs, the feature matrix and the consumption rules
  are all public — but publishes no list prices. Pricing is quoted through Cisco Commerce and partners. plan_count reflects
  the licence tiers Cisco names, with price recorded as null rather than guessed. There is no separate charge for API access:
  the APIs are a feature of the product and are gated by the licence tier of the features they touch.'
plan_count: 6
plans:
- name: Evaluation
  sku: null
  price: 0
  currency: USD
  period: 90 days
  included: 100 endpoints, all features enabled
  overage: null
  limits:
    endpoints: 100
    days: 90
  note: Granted automatically on install. On expiry only the Licensing window remains reachable in the admin portal, and no
    alarm is raised beforehand. Extendable by 90 days via a Cisco SCM case quoting the PAN UDIs.
- name: Essentials
  sku: ISE-E-LIC
  price: null
  currency: null
  period: subscription
  included: per active endpoint
  features:
  - AAA and 802.1X
  - Guest (Hotspot, Self-Registered, Sponsored)
  - Easy Connect / PassiveID
  consumption: One licence per endpoint that establishes a RADIUS session; released at end of session.
- name: Advantage
  sku: ISE-A-LIC
  price: null
  currency: null
  period: subscription
  included: per active endpoint
  features:
  - Everything in Essentials
  - Profiling
  - BYOD
  - pxGrid, pxGrid Cloud and pxGrid Direct context sharing
  - User Defined Network
  - TrustSec (group-based policy)
  - Endpoint Analytics
  - Rapid Threat Containment / Adaptive Network Control
  - Workload Connector
  consumption: One Advantage licence per endpoint regardless of how many Advantage features that endpoint uses.
- name: Premier
  sku: ISE-P-LIC
  price: null
  currency: null
  period: subscription
  included: per active endpoint
  features:
  - Everything in Advantage
  - Posture
  - Mobile Device Management (MDM) compliance
  - Threat-Centric NAC (TC-NAC)
  consumption: Consumed when an endpoint uses posture, MDM or threat attributes in an authorization policy.
- name: Device Administration
  sku: null
  price: null
  currency: null
  period: subscription
  included: TACACS+ service, licensed per Policy Service Node (PSN)
  features:
  - TACACS+ device administration
  note: Licensed per PSN rather than per endpoint.
- name: Virtual Appliance (VM Common)
  sku: null
  price: null
  currency: null
  period: perpetual/subscription
  included: one virtual or IaaS ISE node
  features:
  - Runs ISE on VMware/Hyper-V/KVM or on AWS, Azure or OCI
  note: Required in addition to a subscription tier when the form factor is virtual rather than a Secure Network Server appliance.
support_skus:
- name: Cisco ISE Basic Support
  sku: SVS-ISE-SUP-B
- name: Cisco ISE Solution Support
  sku: SVS-ISE-SUP-S
- name: Cisco ISE Enhanced Support
  sku: SVS-ISE-SUP-E
- name: Cisco ISE Premium Support
  sku: SVS-ISE-SUP-P
subscription_sku: ISE-SEC-SUB