cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

808
Views
0
Helpful
3
Replies
Highlighted
Beginner

Cisco ISE 2.3 Patch 1

All,

Running ISE 2.3 (Patch 1 ) on 8 3395's, on my PAN the memory utilisation is indicating 62%, is this anything to be concerned about?

Looking through the forums its a common issue but fixed with an upgrade? I know patch 2 is available anyone able to help validate?

Total endpoint count 60,000

CPU running 2/3%

Cheers,

 

3 REPLIES 3
Highlighted
Beginner

Re: Cisco ISE 2.3 Patch 1

Hi Jason,

 

The below is from link I pasted, it seems high CPU was resolved in 2.3 patch 1

 

CSCvf75225

PAN runs high CPU due to 100K limit in the Redis server.

 

CSCvc86247

High CPU usage caused by infinite loop threads on PSN.

 

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/release_notes/ise23_rn.html#pgfId-807037

 

I have just upgraded to patch 2 and as far I remember, I didn't see any CPU related issue in patch 1. I think it won't harm to upgrade to patch 2 and monitor. You can always rollback.

 

Looking at your endpoint, it could be your hardware limitation. you also want to check whether your hardware requirement is met with your traffic before patch upgrade. 

 

hope this helps.

 

 

Highlighted
Beginner

Re: Cisco ISE 2.3 Patch 1

Hi Paul,

 

Thanks for the reply, as stated in the initial post. CPU usage is not the issue its more memory usage and why it seems to be creeping up that's of concern, I was under the impression that the PAN and SAN would be utilised in a similar manner. In my case the PAN is at 62% memory utilisation and the SAN is 20% memory utilisation.

Do you think this my be a direct result of a memory leak problem?

 

Cheers,

Jay

 

Highlighted
Beginner

Re: Cisco ISE 2.3 Patch 1

sorry, I was a bad reader :-)

 

Can I suggest you to update the title of thread to "Cisco ISE 2.3 High Memory Utilization" 

 

Just had a look at my ISE 2.3 (patch 2) RAM and it's 80%

 

I found some articles where same issue was experienced on 2.2 which was resolved after upgrading to 2.3 

 

But it looks like the issue is back to 2.3 again. please read below

https://supportforums.cisco.com/t5/aaa-identity-and-nac/ise-2-2-high-memory/td-p/3187875

 

I would suggest to lodge a TAC case with cisco. I will take the same action.

 

Please keep posted