https://community.cisco.com/t5/network-access-control/ise-nmap/m-p/3795925#M485474 <P>I have a customer looking at implement ISE, and they have a very large network (300K endpoint).</P> <P>They are concerned about enabling the NMAP probe to avoid possible issues on the network, and have asked me to verify if there are protection mechanisms in ISE to avoid running too many NMAP scans, and also what are the performances on the PSN in terms of how man scans they can run on the ISE side.</P> <P>Do we have those information?</P> <P>&nbsp;</P> <P>Thanks</P> <P>Francesca</P> Wed, 06 Feb 2019 13:52:01 GMT martucci 2019-02-06T13:52:01Z https://community.cisco.com/t5/network-access-control/ise-nmap/m-p/3795925#M485474 <P>I have a customer looking at implement ISE, and they have a very large network (300K endpoint).</P> <P>They are concerned about enabling the NMAP probe to avoid possible issues on the network, and have asked me to verify if there are protection mechanisms in ISE to avoid running too many NMAP scans, and also what are the performances on the PSN in terms of how man scans they can run on the ISE side.</P> <P>Do we have those information?</P> <P>&nbsp;</P> <P>Thanks</P> <P>Francesca</P> Wed, 06 Feb 2019 13:52:01 GMT https://community.cisco.com/t5/network-access-control/ise-nmap/m-p/3795925#M485474 martucci 2019-02-06T13:52:01Z https://community.cisco.com/t5/network-access-control/ise-nmap/m-p/3796358#M485478 <P>NMAP performance issue only manifests it self if ran manually for a large subnet. I suggest not doing any manual scan then ISE would only scan conditionally for single endpoints per profiler policy to gain more insights about the endpoint.</P> Wed, 06 Feb 2019 22:15:03 GMT https://community.cisco.com/t5/network-access-control/ise-nmap/m-p/3796358#M485478 howon 2019-02-06T22:15:03Z