F5 BIG IP Load Balancing Deployment for ISE

[sbyars]

Looking to leverage the deployment guide created by Cisco to implement an F5 load balancing scenario for ISE.  The document and other resources were created in 2014 and I know a lot has changed on the ISE front since then (presumably F5 as well) and was wondering if there are any updated docs, caveats etc. that we should know before going down this path.

Resource link below

ISE Load Balancing

[hslai · Accepted solution]

The guide is current. You may look at other discussions in this space on F5. And, Craig has been presenting BRKSEC-3699 at Cisco Live; e.g. Designing ISE for Scale and High Availability (2017 Melbourne).

[umahar]

If you have a TrustSec environment use  12.1.2 HF1 which was recently released.

This took care of an F5 bug related to reassembly/fragmentation encountered when EAP-TLS is used in a TrustSec environment.