ISE management gui slow after upgrade from 2.1 to 2.4

[d.stavasen]

Hi,

Just wanna check if anyone else had the same experience with 2.4 upgrade as us. GUI worked fine with 2.1. We have installed all 3 patches that comes with this version and that helped us with latency we saw with client authentication. Now we thinking about downgrade to 2.3 to see if this gets us to a state that are usable. 

[Jason Kunst]

2.2 is the current recommended long term release however 2.4 should become that with the latest patch. 2.3 is not recommended and there is no downgrade path

Please work with the tac to see if they can help debug why it’s slow

[kangkungkok]

I am currently using ISE 2.4. I first got the equipment and I set it up, but EST service not running. I referenced the bug CSCvj11319, but I have not found a solution.

I hope you can solve it easily and concisely. Please do not leave us a few days.

[Jason Kunst]

The community is not meant for troubleshooting break fix. Please work with the tac

[d.stavasen]

We have an TAC case open. Will update if there is anything that could help the community.

[Charlie Moreton · Accepted solution]

Is this an appliance or a VM?  If an appliance, what model?  SNS-3415, SNS-3495, SNS-3515, SNS-3595?

If a VM, what are the specific numbers for the CPU Reservation?  Memory Reservation?

[d.stavasen]

Both. 2 PSN nodes on SNS-3595, and 2 PSN, 2 PAN, 2 MNT nodes on 8 cores, 32GB. 35k endpoints. We waiting on TAC now. Will keep you updated!

[Charlie Moreton · Accepted solution]

As seen here, from the Cisco SNS 3500 Series Appliance Hardware Installation Guide, the SNS-3595 should have 64 GB RAM:

In the Cisco Identity Services Engine Installation Guide, Release 2.4, the VM specs for the SNS-3595 equivalent specifically call out 64GB RAM, too.

In a distributed deployment, whereas all personas are on a different node, the PSNs have a maximum of 40,000 concurrent endpoints each.  You have 2 PSNs with 25,000 endpoints.  You might want to take a look at the RAM.

[kangkungkok]

hi moreton 

I set it like the above.
Web admin page is not open

[kangkungkok]

I set it like the above.
Web admin page is not open

[Jason Kunst]

Seems like you’re duplicating your postings please contact the tac to work further

[d.stavasen]

We changed to 64GB on all nodes yesterday and also reserved memory. After this we have seen huge improvement. We will see if we change the memory reservation. Haven´t seen anywhere that its necessary.

[d.stavasen]

We changed to 64GB on all nodes yesterday and also reserved memory. After this we have seen huge improvement. We will see if we change the memory reservation. Haven´t seen anywhere that its necessary. Thanks for the support!

[Jason Kunst]

Great info. The admin guide goes over requirements sizing and so does the use performance and scale delivery in Cisco live Orlando


https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944


https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_01.html?bookSearch=true#ID-1417-00000074

[Damien Miller]

Just going to put this out there with you. I noticed the exact same thing taking 100k active endpoint deployment from 2.1 to 2.4.  Even with super mnt's it feels very not super, it's like someone stuffed some kryptonite the nodes pockets.   

Also wouldn't suggest upgrading to 2.4 at least until patch 4 is released if you manage a large environment. 

[d.stavasen]

Exactly the same feeling we having :) Heard anything about patch 4?