ISE OVA Resource Reservations & TAC Support

[david.kelsen]

Hi,

If we deploy an ISE v2.3 OVA based on the SNS-3495 ISE appliance and strip the VM of the resource reservations imposed by the OVA template, will we forfeit TAC support?

[paul]

If you are having issues that appear to be resource related that is one of the first things TAC will check for and will not support you until you have the reservations are in place.  If the VM resources are an issue, then appliances should be purchased.

[Damien Miller · Accepted solution]

Technically no, TAC should still support the deployment. The caveat here is as Paul mentioned, it's one of the first things looked at when there are issues. It will be up to you to prove that you are not hitting any resource restrictions or possibly provide reservations as a troubleshooting step.

The deployment guide calls this out as supported with a note.
"If you choose to deploy Cisco ISE manually without the recommended reservations, you must assume the responsibility to closely monitor your appliance’s resource utilization and increase resources, as needed, to ensure proper health and functioning of the Cisco ISE deployment."

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_01.html

[david.kelsen]

Thanks for the replies, its pretty much as expected... yes but no...

[jan.nielsen]

The problem is that the issues you may run into at some point won't just be performance, but actual damage to the system, like database corruption and such. This i have seen many times now.