ISE NMAP

[martucci]

I have a customer looking at implement ISE, and they have a very large network (300K endpoint).

They are concerned about enabling the NMAP probe to avoid possible issues on the network, and have asked me to verify if there are protection mechanisms in ISE to avoid running too many NMAP scans, and also what are the performances on the PSN in terms of how man scans they can run on the ISE side.

Do we have those information?

Thanks

Francesca

[howon · Accepted solution]

NMAP performance issue only manifests it self if ran manually for a large subnet. I suggest not doing any manual scan then ISE would only scan conditionally for single endpoints per profiler policy to gain more insights about the endpoint.