ISE Distributed Deployment with Dedicated SXP servers

[Steve Sewa]

In an ISE deployment with all dedicated nodes, does Cisco recommend using redundant SXP servers?  For example:

(2) Admin nodes (primary/secondary)

(2) MnT nodes (primary/secondary)

(2) PSN

(2) SXP

Thanks,

Steve

[Marvin Rhoads · Accepted solution]

It depends how heavily loaded your PSNs are and what platform you are using. (SXP is a service running on a PSN.) Of course if you aren't doing Trustsec (SGTs, SGACL etc.), then the question is moot. 

There is a slide specific to SXP scaling in Craig Hyps' Cisco Live presentation "BRKSEC-3699 - Designing ISE for Scale and High Availability (2017 Melbourne)".

You can see it here (slide #145):

https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=94625&backBtn=true 

[Steve Sewa]

Thanks Marvin, very useful slide!