Maximum storage for ACS logging vs ISE

Tze Tai Mak — Mon, 11 Dec 2017 22:56:25 GMT

Dear all,

My customer is migrating from ACS to ISE.

Their existing ACS HW SNS-3515 only support a max. of 750GB HD which is not enough for them.

If they migrate to ISE, how to compare the ACS logging vs ISE device admin logging?

For each TACACS+ event, is it around the same logging size taken? what is the max logging size for TACACS+ events?

Thanks, Tommy

Re: Maximum storage for ACS logging vs ISE

Craig Hyps — Tue, 12 Dec 2017 06:14:21 GMT

This is the ISE support community, so I will answer the questions specific to ISE.

SNS-3515 has 600GB drive space (not 750GB), of which 60% is allocated to RADIUS and T+ logging in ISE 2.2+ with an additional 20% overhead for purging. Effective storage and guidance on days retention are included in ISE Install Guide.

For additional info, see

ISE Device Administration (TACACS+)

ACS to ISE Migration

Also see Reference version of presentation for BRKSEC-3699 from this year on ciscolive.com. It contains information on general packet sizes and counts for different T+ operations.

Craig

topic Maximum storage for ACS logging vs ISE in Network Access Control

Maximum storage for ACS logging vs ISE

Re: Maximum storage for ACS logging vs ISE