cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1779
Views
10
Helpful
5
Replies

Cisco ISE VM Category Deployment

jj2048
Level 1
Level 1

We'd like to know if mixing VM category as distributed deployment is a recommended set up.

A team proposed a mix of VM Medium as Primary and Secondary PAN,MNT and VM Small as (2) PSNs.
Will this pose problems after?

The intended purpose for this deployment is for device admin TACACS only.

Thank you in advance.

2 Accepted Solutions

Accepted Solutions

Hi,

It won't impose technical problems. However, I recommend to check ISE
sizing datasheet to make sure that you don't waste money as this license is
not cheap. At the same time, you don't go under size thinking that adding
more RAM/CPU/DISK will cover your environment.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKSEC-3432.pdf

**** please remember to rate useful posts

View solution in original post

balaji.bandi
Hall of Fame
Hall of Fame

Is the deployment only for TACACS device admin, you can do 2 node is good enough.

 

Look below document help you :

 

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

5 Replies 5

Hi,

It won't impose technical problems. However, I recommend to check ISE
sizing datasheet to make sure that you don't waste money as this license is
not cheap. At the same time, you don't go under size thinking that adding
more RAM/CPU/DISK will cover your environment.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKSEC-3432.pdf

**** please remember to rate useful posts

Thank you.

balaji.bandi
Hall of Fame
Hall of Fame

Is the deployment only for TACACS device admin, you can do 2 node is good enough.

 

Look below document help you :

 

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thank you

Hi @jj2048 ,

 please take a look at the link: ISE Performance & Scale ... search for ISE PSN Performance and ISE TACACS+ Performance.

 

Note: take a look at ISE 2.7 Software Download:

the OVA file for 600GB Disk for Small or Medium (PAN or MnT) is ISE-2.7.0.356-virtual-SNS3615-SNS3655-600.ova

the OVA file for 300GB Disk for Eval, Small, Medium (PSN) is ISE-2.7.0.356-virtual-SNS3615-SNS3655-300.ova

 

Hope this helps !!!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: