Cisco ISE sizing

[Saeed Abd Elhalim Hamada]

i would like to know what is the aspects for sizing

like total number of endpoint

concurrent session etc..  is there any table or something for that 

[Karsten Iwen]

Start here:

https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

https://community.cisco.com/t5/security-knowledge-base/how-to-determine-the-scale-of-an-ise-deployment/ta-p/4786966

https://www.youtube.com/watch?v=BqGmQBgQJw0

[Rob Ingram]

@Saeed Abd Elhalim Hamada Cisco have the ISE Scale and Performance guide which has the information you require - https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

You can determine the size of the ISE cluster and hardware requirements based on your estimated number of concurrent users. Best practice is to deploy multiple ISE nodes for full resilency.

[Saeed Abd Elhalim Hamada]

can you explain please what is the different between the two tables :

how node act as PAN and Mnt CAS 2m this mean sessions for only PAN and MNt not authication sessions or what ??? 

and the seconed table mean authication session only   ??

[Karsten Iwen]

The first table reference a complete deployment while the second table shows a per-server sizing. All is based on active sessions which means an endpoint is activily processed on the PSN.

[Saeed Abd Elhalim Hamada]

you mean first table PAN , MNT , PSN in same node ?

and the seconed table mean PSN only that mean if we have 50 PSN 50*100.000 mean 5 Mil session ?

[Karsten Iwen]

---

@Saeed Abd Elhalim Hamada wrote:

you mean first table PAN , MNT , PSN in same node ?

---

PAN/MnT can be on same node, but PSN separated.

---

and the seconed table mean PSN only that mean if we have 50 PSN 50*100.000 mean 5 Mil session ?

---

yes, PSN only, but in total not more than the deployment scale. 50*100k will only scale to 2.000.000 sessions.