A Base license is consumed when an endpoint establishes an active network session (RADIUS)
RADIUS session ends
Authentication
Mobility
A Mobility license is consumed when a wireless or VPN endpoint establishes an active network session
RADIUS session ends
Authentication
Mobility Upgrade
A Mobility Upgrade license is consumed when a wired endpoint establishes an active network session
RADIUS session ends
Profiling
Plus
A Plus license is consumed when an endpoint with an active session uses profiling classification in an authorization policy
RADIUS session ends
BYOD
Plus
A Plus license is consumed when an endpoint with an active session uses its registration status in an authorization policy
RADIUS session ends
MDM (Partner)
Apex
An Apex license is consumed when an endpoint uses an MDM attribute in an authorization policy
RADIUS session ends
Threat-Centric NAC
Apex
An Apex license is consumed when an endpoint uses or triggers threat based information or action as part of the authorization policy
RADIUS session ends
Posture
Apex
An Apex license is consumed when an endpoint with an active session receives an authorization based on a posture status other than “Not applicable” (for example, Compliant, Not compliant, Pending, or Unknown)
RADIUS session ends or the endpoint re-authenticates to a session that does not require posture