ISE: Logging target

jds5 — Thu, 03 Nov 2022 09:58:38 GMT

Hello,

We have a cluster deployment of 6 ISEs.

We have 4 zones in separate DCs with 1 PSN per zone and one Syslog collector per zone. Traffic between zones is prohibited.

Z1P > 1 PSN / 1 Syslog

Z2P> 1 PSN / 1 PAN Primaire Mnt Secondaire / 1 Syslog

Z1N > 1 PSN / 1 PAN Secondaire Mnt Primaire / 1 Syslog

Z1P > 1 PSN / 1 Syslog

We're looking for a solution so that the ISE logs reach their zone's Syslog collector without sending the flows four times.

Is there a solution to this problem in an ISE version of 2.4 or 2.7?

Re: ISE: Logging target

ahollifield — Thu, 03 Nov 2022 13:36:56 GMT

How does ISE function if "Traffic between zones is prohibited."?

The logs are sent to all configured logging targets directly from each PSN. I am not aware of a way to exclude certain log collectors on a per PSN basis.

topic Re: ISE: Logging target in Network Access Control

ISE: Logging target

Re: ISE: Logging target