02-17-2024 08:43 AM - edited 02-17-2024 09:05 AM
Hi members, I am seeing following issues on ISE after upgrading to 3.2 patch 4 :
This is a 2 node deployment with 3715, we are closing around only 7-8K active sessions, Only additional feature enabled in addition to upgrade is log analysis but my understating was it should not be resource intensive. I am seeing 90% plus ram and 100% CPU spike from time to time almost every hour or so. I understand under 90% RAM is expected but CPU spike and 90% plus memory usage doesn't make much sense, as test I have disabled log analysis to monitor behavior since this was the only few feature addition, I also have opened a case open with Cisco. I wanted to pick your brain and see if anyone has any advice or input.
I will upgrade to patch 5 probably next weekend.
02-19-2024 12:40 PM
Hi @ammahend
I don't have an SNS to compare this to. I have one customer with a few SNS-3615 servers currently running ISE 3.1 that I was planning to upgrade to ISE 3.2 soon.
Have you logged into the CIMC to have a look around for any hardware events that might be causing slowness? It's worth checking (although unlikely that a patch would affect the hardware).
Do you see any clues in the Dashboard Alarm panel?
I think you've done the right thing to get TAC involved. They should be able to point to the cause (checking the process table to see what's hogging the CPU).
02-26-2024 07:45 AM - edited 02-26-2024 07:46 AM
Hi Arne, No hardware events, I am waiting for Cisco to review the Support bundle, but we did make some changes after which we have not high load average
disabled log analysis, deactivated any unused probes, disabled Profiler Forwarder Persistence queue. I will post when I hear back from Cisco.
02-23-2024 07:27 AM
Hi - I have exactly the same problem on ISE 3.2 Patch 4. I have two Admin Nodes and 3 PSNs across multiple sites. A safe re-boot of the Admin Nodes does help it for a short time and then the Slowness returns. Getting Tacacs/Radius Logs takes an age. It was great initially as Patch 4 did resolve a lot of our issues. I was looking to upgrade to Patch 5 so let me know how you get on with it and I will probably attempt the same so long as it does not break anything else.
03-13-2024 06:08 AM
I too am having the same issue, I upgraded from a perfectly working fine v3.1 and now am on 3.2 patch 5 and my admin nodes are getting slower in responding and taking a while. A safe reboot does fix it for a short period but then will eventually get slow again.
Will be raising a TAC case for this tomorrow. Does anyone else have an update on this at all?
05-06-2024 02:20 AM
Any news on this issue. I have the exactly same problem. Here it is 3.2 patch 5.
05-06-2024 02:31 AM
Hi Jju,
No update for me, I'm certain more customers are experiencing this problem. I currently have an open TAC case with Cisco support and is being escalate to the BU to investigate however they are only looking at it as a single case issue, where as im advising them that there is more than one org having this problem. I never had a performance issue on version 3.1
05-06-2024 04:26 AM
I have now installed patch 6. And the auth latency falled and the CPU load dropped from 50-60% to 3-5%. I not sure it is due to the patch, but will monitor it the next weeks. And if it comes back I would open a tac case.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide