ISE 3.0 Scaling Medium Hybrid Deployment

[x00008037]

Does anyone know what the minimum size of an ISE Medium Distributed Deployment is ?

From Cisco Documentation i can only see that ISE 3.0 will support <=6 PSN when the PAN and MNT are combined as one persona.

I want a Hybid deployment of PAN/MnT/PxGrid (Active), PAN/MnT/PxGrid (Standby), and 2 PSN's

Is there a minimum amount of PSN's for Hybrid ??

[Damien Miller · Accepted solution]

What you're planning to do will work fine. You could have a hybrid deployment as you're suggesting with a single PSN, but having no PSN redundancy isn't of much use so the typical hybrid deployment is 2x PAN/MNT and at least 2x PSN.

Keep in mind that hybrid deployment do have their place, but the total supported active sessions are the same for a standalone (all roles on two nodes), and hybrid. Only until you split the PAN, and MNTs on to their own dedicated nodes will you see scale beyond a standalone/hybrid, up to 50k active endpoints if using the 3695 templates. 

[x00008037]

Yes but the Hybrid can be scaled up to 50000 connections if they are VM's and the specs are increased to a 3695 model.

The hybrid gives us the options to break out the PxGrid Personas to their own node and also gives options to go as big as 6 nodes in total for the deployment.

Appreciate your reply

[x00008037]

6 PSN nodes to be accurate 

[Damien Miller · Accepted solution]

Yes, 50k active if the PAN/MNT are running on 3695 templates. The six PSNs servicing those endpoints don't have to be 3695's though, you could support that with 5x 3615's, but you would have no extra capacity for failures or maintenance. The typical is for these hybrid psn's to be 3595 or 3655's. 

[x00008037]

Yeah i Think the 3655 as a vm on ISE version 3.0 will work for PAN/MNT and the two PSN's.