ISE deployment in large environment

john5 — Thu, 24 May 2018 09:15:06 GMT

Hi,

I have a large implementation of ISE in a distributed deployment with 2 ISEs for PAN and 2 for MnT and centralized PSNs in multiple regions which will cover alot of branches.

Q1:

what is the best practice for deploying PSNs "16 PSN , 4 in each region" is it over loadbalancer or i can point switches to them normally ? if we use loadbalancer is there any known issues we should take care of especially we will deploy most of ISE features "guest access ,BYOD ,profiling, posture, TrustSec ... etc"

Q2:

in case of failure of any PSN or multiple PSNs or even the entire region what will be the best practice to design the switches with and without loadbalancer.

thanks in advance.

Re: ISE deployment in large environment

Craig Hyps — Thu, 24 May 2018 13:01:48 GMT

This is all covered in BRKSEC-3699 session from ciscolive.com (Reference version)

On-Demand Library - Cisco Live Global Events

Re: ISE deployment in large environment

john5 — Thu, 24 May 2018 13:30:26 GMT

Thanks a lot chyps

topic Re: ISE deployment in large environment in Network Access Control

ISE deployment in large environment

Re: ISE deployment in large environment

Re: ISE deployment in large environment