ISE: Logging target

[jds5]

Hello,

We have a cluster deployment of 6 ISEs.

We have 4 zones in separate DCs with 1 PSN per zone and one Syslog collector per zone. Traffic between zones is prohibited.

Z1P > 1 PSN / 1 Syslog

Z2P> 1 PSN / 1 PAN Primaire Mnt Secondaire / 1 Syslog

Z1N > 1 PSN / 1 PAN Secondaire Mnt Primaire / 1 Syslog

Z1P > 1 PSN / 1 Syslog

We're looking for a solution so that the ISE logs reach their zone's Syslog collector without sending the flows four times.

Is there a solution to this problem in an ISE version of 2.4 or 2.7?

BR

[ahollifield]

How does ISE function if "Traffic between zones is prohibited."?  

The logs are sent to all configured logging targets directly from each PSN.  I am not aware of a way to exclude certain log collectors on a per PSN basis.