topic Re: Cisco ISE sizing in Network Access Control

Cisco ISE sizing

Saeed Abd Elhalim Hamada — Sun, 03 Nov 2024 07:54:25 GMT

i would like to know what is the aspects for sizing

like total number of endpoint

concurrent session etc.. is there any table or something for that

Re: Cisco ISE sizing

Karsten Iwen — Sun, 03 Nov 2024 07:58:41 GMT

Start here:

https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

https://community.cisco.com/t5/security-knowledge-base/how-to-determine-the-scale-of-an-ise-deployment/ta-p/4786966

https://www.youtube.com/watch?v=BqGmQBgQJw0

Re: Cisco ISE sizing

Rob Ingram — Sun, 03 Nov 2024 07:58:57 GMT

@Saeed Abd Elhalim Hamada Cisco have the ISE Scale and Performance guide which has the information you require - https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

You can determine the size of the ISE cluster and hardware requirements based on your estimated number of concurrent users. Best practice is to deploy multiple ISE nodes for full resilency.

Re: Cisco ISE sizing

Saeed Abd Elhalim Hamada — Sun, 03 Nov 2024 10:03:33 GMT

can you explain please what is the different between the two tables :

how node act as PAN and Mnt CAS 2m this mean sessions for only PAN and MNt not authication sessions or what ???

and the seconed table mean authication session only ??

Re: Cisco ISE sizing

Karsten Iwen — Sun, 03 Nov 2024 10:48:41 GMT

The first table reference a complete deployment while the second table shows a per-server sizing. All is based on active sessions which means an endpoint is activily processed on the PSN.

Re: Cisco ISE sizing

Saeed Abd Elhalim Hamada — Sun, 03 Nov 2024 11:14:42 GMT

you mean first table PAN , MNT , PSN in same node ?

and the seconed table mean PSN only that mean if we have 50 PSN 50*100.000 mean 5 Mil session ?

Re: Cisco ISE sizing

Karsten Iwen — Sun, 03 Nov 2024 15:20:44 GMT

@Saeed Abd Elhalim Hamada wrote:

you mean first table PAN , MNT , PSN in same node ?

PAN/MnT can be on same node, but PSN separated.

and the seconed table mean PSN only that mean if we have 50 PSN 50*100.000 mean 5 Mil session ?

yes, PSN only, but in total not more than the deployment scale. 50*100k will only scale to 2.000.000 sessions.