ISE to AD integration

[pwakefor]

I know there are the key design constraints for inter-ISE node communication:

·        Starting in ISE 2.1: 300ms Max round-trip (RT) latency between any two ISE nodes

·        BW most critical between:

o   PSNs and PriPAN (DB Replication)

o   PSNs and MnT (Audit Logging)

·        Latency most critical between PSNs and Pri PAN.

Are there an similar recommendations for PSN to AD integrations i.e. BW, latency etc.?

Thanks Phil

[hslai]

We do not have such for AD. Instead, we recommend to make use of Microsoft Active Directory site so that PSNs query local DC and GC. Please take a look at CiscoLive BRKSEC-2132.

[rovargas]

What would be our approach when customer moves their AD to the cloud? I guess that a latency guidance would be needed...

[rovargas]

What would be our approach when customer moves their AD to the cloud? I guess that a latency guidance would be needed...