Cisco ISE 3.2 centralized deployment sizing

[mrimmune101]

Hello team

Please help with understanding to choose correct virtual VM machines for network with 20,000 active concurrent session.

I think about image 3655 with 4 nodes:

PAN+MNT X 2

PSN X 2

what do you think?

thanks in advance.

regards

Michael

[ahollifield]

https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/secure-network-server-3615-3655-3695-eol.html

[Marvin Rhoads]

Sizing your VMs equivalent to the SNS-3655 would certainly suffice as even in a failure mode (loss of one PSN), the remaining PSN could handle 50,000 concurrent RADIUS authentications. Even with SNS-3615 sized PSNs, each can handle 25,000 sessions in a 4-node deployment like you are considering.

Reference Table 4 in the first link @ahollifield provided.