topic Re: 600 GB for VM ISE in Network Access Control

600 GB for VM ISE

emzarago — Tue, 27 Feb 2018 01:58:17 GMT

I have a Customer that wants to know, why 600 GB for VM ISE, does anyone know what we use this space for?, the customer need justify it.

Re: 600 GB for VM ISE

ldanny — Tue, 27 Feb 2018 09:05:03 GMT

It is recommended that any node running MnT persona should have a minimum of 600GB for the logs,debugs..etc

Take a look at this doc regarding performance and Scale.

ISE Performance & Scale

Re: 600 GB for VM ISE

Craig Hyps — Tue, 27 Feb 2018 19:22:20 GMT

To add to Danny's response, the reason is primarily data retention. MnT is the logging node--it stores all RADIUS/TACACS+ events. Ability to generate reports on historical events is driven by disk capacity. The install guide offers some general data points on retention based on allocated disk size, and yes, your mileage may vary. Is it possible to deploy with less? Yes, but then you will experience shorter retention and potentially more frequent purging and resource utilization to keep capacity within usable range.

Re: 600 GB for VM ISE

emzarago — Mon, 12 Mar 2018 17:51:06 GMT

Chyps thank you for the answer, one more question, the installation is supported for the TAC if the customer installed it with less HDD capacity?

Re: 600 GB for VM ISE

hslai — Mon, 12 Mar 2018 17:57:54 GMT

Yes, supported by TAC. In case CU deployments running into issues with the sub-optimal settings, CU will be asked to adhere to the recommendations.

As ISE currently not supporting disk resizing, that would mean to install a new M&T node with bigger disk allocations.