Cisco ISE VM Category Deployment

[jj2048]

We'd like to know if mixing VM category as distributed deployment is a recommended set up.

A team proposed a mix of VM Medium as Primary and Secondary PAN,MNT and VM Small as (2) PSNs.
Will this pose problems after?

The intended purpose for this deployment is for device admin TACACS only.

Thank you in advance.

[Mohammed al Baqari · Accepted solution]

Hi,

It won't impose technical problems. However, I recommend to check ISE
sizing datasheet to make sure that you don't waste money as this license is
not cheap. At the same time, you don't go under size thinking that adding
more RAM/CPU/DISK will cover your environment.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKSEC-3432.pdf

**** please remember to rate useful posts

[jj2048]

Thank you.

[balaji.bandi · Accepted solution]

Is the deployment only for TACACS device admin, you can do 2 node is good enough.

Look below document help you :

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

[jj2048]

Thank you

[Marcelo Morais]

Hi @jj2048 ,

 please take a look at the link: ISE Performance & Scale ... search for ISE PSN Performance and ISE TACACS+ Performance.

Note: take a look at ISE 2.7 Software Download:

the OVA file for 600GB Disk for Small or Medium (PAN or MnT) is ISE-2.7.0.356-virtual-SNS3615-SNS3655-600.ova

the OVA file for 300GB Disk for Eval, Small, Medium (PSN) is ISE-2.7.0.356-virtual-SNS3615-SNS3655-300.ova

Hope this helps !!!