topic Re: ISE management gui slow after upgrade from 2.1 to 2.4 in Network Access Control

ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Tue, 18 Sep 2018 06:40:02 GMT

Hi,

Just wanna check if anyone else had the same experience with 2.4 upgrade as us. GUI worked fine with 2.1. We have installed all 3 patches that comes with this version and that helped us with latency we saw with client authentication. Now we thinking about downgrade to 2.3 to see if this gets us to a state that are usable.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Jason Kunst — Tue, 18 Sep 2018 13:01:44 GMT

2.2 is the current recommended long term release however 2.4 should become that with the latest patch. 2.3 is not recommended and there is no downgrade path

Please work with the tac to see if they can help debug why it’s slow

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Charlie Moreton — Tue, 18 Sep 2018 13:17:47 GMT

Is this an appliance or a VM? If an appliance, what model? SNS-3415, SNS-3495, SNS-3515, SNS-3595?

If a VM, what are the specific numbers for the CPU Reservation? Memory Reservation?

Re: ISE management gui slow after upgrade from 2.1 to 2.4

kangkungkok — Wed, 19 Sep 2018 01:09:22 GMT

I am currently using ISE 2.4. I first got the equipment and I set it up, but EST service not running. I referenced the bug CSCvj11319, but I have not found a solution.

I hope you can solve it easily and concisely. Please do not leave us a few days.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Jason Kunst — Wed, 19 Sep 2018 01:12:30 GMT

The community is not meant for troubleshooting break fix. Please work with the tac

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Damien Miller — Wed, 19 Sep 2018 01:13:53 GMT

Just going to put this out there with you. I noticed the exact same thing taking 100k active endpoint deployment from 2.1 to 2.4. Even with super mnt's it feels very not super, it's like someone stuffed some kryptonite the nodes pockets.

Also wouldn't suggest upgrading to 2.4 at least until patch 4 is released if you manage a large environment.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Wed, 19 Sep 2018 06:32:41 GMT

We have an TAC case open. Will update if there is anything that could help the community.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Wed, 19 Sep 2018 06:33:20 GMT

Exactly the same feeling we having 🙂 Heard anything about patch 4?

Re: ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Wed, 19 Sep 2018 07:33:39 GMT

Both. 2 PSN nodes on SNS-3595, and 2 PSN, 2 PAN, 2 MNT nodes on 8 cores, 32GB. 35k endpoints. We waiting on TAC now. Will keep you updated!

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Charlie Moreton — Wed, 19 Sep 2018 11:43:10 GMT

As seen here, from the Cisco SNS 3500 Series Appliance Hardware Installation Guide, the SNS-3595 should have 64 GB RAM:

In the Cisco Identity Services Engine Installation Guide, Release 2.4, the VM specs for the SNS-3595 equivalent specifically call out 64GB RAM, too.

In a distributed deployment, whereas all personas are on a different node, the PSNs have a maximum of 40,000 concurrent endpoints each. You have 2 PSNs with 25,000 endpoints. You might want to take a look at the RAM.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

kangkungkok — Thu, 20 Sep 2018 01:28:34 GMT

hi moreton

I set it like the above.
Web admin page is not open

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Jason Kunst — Thu, 20 Sep 2018 01:44:45 GMT

Seems like you’re duplicating your postings please contact the tac to work further

Re: ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Thu, 20 Sep 2018 11:52:05 GMT

We changed to 64GB on all nodes yesterday and also reserved memory. After this we have seen huge improvement. We will see if we change the memory reservation. Haven´t seen anywhere that its necessary.

Re: ISE management gui slow after upgrade from 2.1 to 2.4

d.stavasen — Thu, 20 Sep 2018 11:52:29 GMT

Re: ISE management gui slow after upgrade from 2.1 to 2.4

Jason Kunst — Thu, 20 Sep 2018 13:34:45 GMT

Great info. The admin guide goes over requirements sizing and so does the use performance and scale delivery in Cisco live Orlando

https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html?bookSearch=true#ID-1417-00000074