topic ISE Authentication Latency metric in Network Access Control

ISE Authentication Latency metric

mykys — Wed, 25 Nov 2020 15:07:34 GMT

Hello,

ISE: 2.6.0.156, path 8

Sorry if this question has already been asked here.

What type of latency is represented under the system summary dashboard: RADIUS or TACACS?

How is it measured?

Thanks,

Myky

Re: ISE Authentication Latency metric

Mark Elsen — Wed, 25 Nov 2020 18:08:26 GMT

- Presumably that will be radius , it may use algorithms also available in these tools :

https://community.cisco.com/t5/security-documents/ise-latency-and-bandwidth-calculators/ta-p/3641112

Re: ISE Authentication Latency metric

Greg Gibbs — Wed, 25 Nov 2020 23:07:06 GMT

See a related post here.

Authentication Latency calculation includes multiple factors such as possible client supplicant issues, RADIUS latency/timeouts between ISE and the NADs, delays in evaluating Authentication/Authorization policies in ISE, and latency with backend systems such as AD.

Re: ISE Authentication Latency metric

mykys — Thu, 26 Nov 2020 13:53:26 GMT

So in a simple way, it is the time from receiving RADIUS Access-Request and time when Access-Accept/Reject is sent by ISE?

Thanks,

Myky