topic Source for ISE Performance &Scale in Network Access Control

Source for ISE Performance &Scale

yuna — Tue, 13 Feb 2018 02:34:06 GMT

Hi Experts,

Does anyone please advise me about the values in the DOC-68347(ISE Performance & Scale)?

My customer asked me about the values of PEAP (MSCHAPv2) auth/sec in ISE 2.3 RADIUS Performance.

Is it theoretical value of software/hardware of SNS or values verified by internal tests?

Thank you in advance.

Re: Source for ISE Performance &Scale

kthiruve — Tue, 13 Feb 2018 06:38:04 GMT

HI Yuma,

Understand your concern. This is based on our internal validation and not a theoretical value.

Thanks

Krishnan

Re: Source for ISE Performance &Scale

Craig Hyps — Tue, 13 Feb 2018 11:09:55 GMT

Krishnan is correct. We certainly do validate performance and scale across the different appliances. I recently raised the gap in missing MAB results and hope to have updates for those soon for ISE 2.4 (usually in the hundreds of auths/sec per PSN). We perform testing to understand max values BEFORE any drops or excessive resource utilization for a given feature or method for a given platform. We separately test scale and performance of an entire configuration which matches supported deployment models for multiple services on multiple nodes. Other perf/scale testing is done, but most fall into the category of individual feature versus overall deployment scale.

Another factor to consider is negative inputs. In most production deployments a node is running EAP authentication (possibly for multiple protocols) for a wide range of client types. Often the noise (bad auth inputs) can be extremely high and will have a significant impact on positive auth rate.