topic Re: Cisco ISE valid Deployment in Network Access Control

Cisco ISE valid Deployment

laurathaqi — Fri, 05 Feb 2021 13:02:26 GMT

Dear community,

I have two small ISE VMs, each with three personas(Mnt, PAN and PSN), full licenses. The company is not big and thus not many users, however as of criticality, we need to deploy one VM in Datacenter1, and the other VM in Datacenter2 in this case.

The plan is as following:

DC1: ISE1 with Active PAN, Passive Mnt and Active PSN.

DC2: ISE2 with Passive PAN, Active Mnt and Active PSN.

Now, based on what I have read on Cisco ISE administration guide. This approach is not covered anywhere, as its either Hybrid with more than 2 PSNs ore Single Deployment with One PSN. But my case is two Active PSNs, one per each DC.

Me question is: Do you think there is any gap possible left out of this design. And if yes, any suggestions would be highly appreciated.

Looking forward to hearing from you.

Thank you,

Laura

Re: Cisco ISE valid Deployment

balaji.bandi — Fri, 05 Feb 2021 13:16:53 GMT

below guide help you for many use cases :

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

Re: Cisco ISE valid Deployment

Marcelo Morais — Fri, 05 Feb 2021 14:14:23 GMT

Hi @laurathaqi ,

search for Stadalone / Dedicated Deployment and ISE Deployment Scale and Limits on then link provided by @balaji.bandi .

HTH !!!

Re: Cisco ISE valid Deployment

laurathaqi — Fri, 05 Feb 2021 19:56:51 GMT

Hi guys,

Thank you for the information and support provided. I will be applying the information into my setup in the upcoming days and let you know the outcome.

Best wishes,

Laura