cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1503
Views
0
Helpful
0
Replies

ISE Passive Identity Questions

smano
Cisco Employee
Cisco Employee

Hi Team, Can anyone help me with few questions regarding the ISE PIC which I couldn't find documentation or reference for the below items
1. Whats the scale or capacity of an AD agent? How many Events or Logs Per Second is supported on each AD agent?
2. What is the recommended Platform for the Passive ID Agent assuming a VM host running Microsoft server 2016
- RAM ?
- CPU/Cores ?
- Disk Space ?

I know agent is not heavy loaded, but my Customer is looking for some recommendations 
3. How to ensure a redundancy for logs if there is an agent failure?

4. Please confirm if we need registry key in the agent or not. 

I found a slide deck in Cisco live slide deck 3697 saying that "when agent requests come from the windows approved server, no need of registry keys". But in the admin guide its mentioned "Add Registry Keys to Allow ISE to Connect to the Domain Controller". 

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_01110.html#task_0DE836DD5C49441ABD83DC60BDC83F41

 

 

Thanks in advance. 

0 Replies 0