Cisco ISE valid Deployment

[laurathaqi]

Dear community, 

I have two small ISE VMs, each with three personas(Mnt, PAN and PSN), full licenses.  The company is not big and thus not many users, however as of criticality, we need to deploy one VM in Datacenter1, and the other VM in Datacenter2 in this case. 

The plan is as following: 

DC1: ISE1 with Active PAN, Passive Mnt and Active PSN. 

DC2: ISE2 with Passive PAN, Active Mnt and Active PSN. 

Now, based on what I have read on Cisco ISE administration guide. This approach is not covered anywhere, as its either Hybrid with more than 2 PSNs ore Single Deployment with One PSN. But my case is two Active PSNs, one per each DC. 

Me question is: Do you think there is any gap possible left out of this design. And if yes, any suggestions would be highly appreciated. 

Looking forward to hearing from you. 

Thank you, 

Laura 

[balaji.bandi · Accepted solution]

below guide help you for many use cases :

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

[Marcelo Morais · Accepted solution]

Hi @laurathaqi ,

 search for Stadalone / Dedicated Deployment and ISE Deployment Scale and Limits on then link provided by @balaji.bandi .

HTH !!!

[laurathaqi]

Hi guys, 

Thank you for the information and support provided. I will be applying the information into my setup in the upcoming days and let you know the outcome.

Best wishes,

Laura