Lms 4.2 compliance check требует отдельной лицензии

Cisco LMS начиная с 4.2 может проверять устройства на соответствие правилам compliance. Есть готовые наборы (PCI-DSS) и есть Без лицензии доступны только (информация из  help)
The End of Life (EOL) and Cisco Security Advisory (PSIRT) policy groups do not require Compliance Management License.
The policies listed  are supported only by LMS license and do not require Compliance Management license:

Groups Defined in Policy Selector   
    Policies
    Distributed DoS Attacks
    Land Attack
    Martian Traffic
Security   
Risky Traffic
    Hot Standby Router Protocol (HSRP)
Network Protocols   
    ICMP
    DHCP Snooping
    IEEE 802.1X Port-Based Authentication
    IP Phone + Host Ports
    IP Phone Ports
    Management VLAN
    Port Security
Switching  
 Unused Ports
    FTP
Global Configuration   
Traceroute
Audit and Management  
 DHCP

You can view the above listed policies only when you add new policy groups.
Партномер Prime Infrastructure 1.1 - Compliance Mgmt на 1000 устройств стоит по GPL душевных денег.