cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1023
Views
10
Helpful
4
Replies

ISE OVA Resource Reservations & TAC Support

david.kelsen
Level 1
Level 1

Hi,

 

If we deploy an ISE v2.3 OVA based on the SNS-3495 ISE appliance and strip the VM of the resource reservations imposed by the OVA template, will we forfeit TAC support?

 

1 Accepted Solution

Accepted Solutions

Damien Miller
VIP Alumni
VIP Alumni

Technically no, TAC should still support the deployment. The caveat here is as Paul mentioned, it's one of the first things looked at when there are issues. It will be up to you to prove that you are not hitting any resource restrictions or possibly provide reservations as a troubleshooting step.

The deployment guide calls this out as supported with a note.
"If you choose to deploy Cisco ISE manually without the recommended reservations, you must assume the responsibility to closely monitor your appliance’s resource utilization and increase resources, as needed, to ensure proper health and functioning of the Cisco ISE deployment."


Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_01.html

View solution in original post

4 Replies 4

paul
Level 10
Level 10

If you are having issues that appear to be resource related that is one of the first things TAC will check for and will not support you until you have the reservations are in place.  If the VM resources are an issue, then appliances should be purchased.

Damien Miller
VIP Alumni
VIP Alumni

Technically no, TAC should still support the deployment. The caveat here is as Paul mentioned, it's one of the first things looked at when there are issues. It will be up to you to prove that you are not hitting any resource restrictions or possibly provide reservations as a troubleshooting step.

The deployment guide calls this out as supported with a note.
"If you choose to deploy Cisco ISE manually without the recommended reservations, you must assume the responsibility to closely monitor your appliance’s resource utilization and increase resources, as needed, to ensure proper health and functioning of the Cisco ISE deployment."


Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_01.html

Thanks for the replies, its pretty much as expected... yes but no...

The problem is that the issues you may run into at some point won't just be performance, but actual damage to the system, like database corruption and such. This i have seen many times now.