ISE Dedicated MnT-Scale Options

[skilpatr]

What scale or performance increases can we get if we break out MnT on its own? If we have VMM for PAN+PxGrid, MnT, PSN (RADIUS, TACACS+).  Is this any better then combining PAN+PxGrid+MnT? This would all be ISE 2.4

Another question, if we are only doing 2 PxGrid connections does this still reduce the scale of the over all system? Is it better to have this standalone?

Thanks

[Jason Kunst]

The only benefits you get are more endpoints when you split out pan mnt either on their own or combined

You wouldn’t run pxgrid on stand-alone with pan . It runs on psn Or by itself in large scale

you also don’t list how many endpoints 

The table is listed here

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_00.html#DeploymentSizeandScalingRecommendations

Please look at training info of performance and scale page as well

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId--1438055417

[skilpatr]

There are 20k endpoints, which is why I am concerned. We have 6x VMMs that we can use, and I want to maximize scale within that constraint. Does this help?