09-25-2019 12:55 PM
Hi Team,
I have a Customer that is going to a Hybrid deployment with 2x 3695 (PAN and MNT) + 4x 3655 (PSN).
What is the recommendation in terms of A/S placement for PAN and MNT.
Is it recommended to do Primary PAN + Secondary MNT in one server and Secondary PAN + Primary MNT on the second server
or
Primary PAN + Primary MNT in one server and Secondary PAN + Secondary MNT on the second server?est,
Diego
Solved! Go to Solution.
09-25-2019 01:18 PM
09-25-2019 01:18 PM
09-25-2019 01:31 PM
Thanks for the reply.
I understand your points and also understand that it will work both ways. I am still struggling to find an official guidance from Cisco.
The only thing I was able to find was Craig response - https://community.cisco.com/t5/identity-services-engine-ise/design-clarification-for-ise-pan-mnt-personas/m-p/3574288
His Cisco Live presentation is clear that both PAN and MNT should go on the same server. https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2018/pdf/BRKSEC-3699-reference.pdf (page 35)
But I would not consider a CISCO Live presentation an official guidance. Would like to here from someone within the BU an official answer.
09-26-2019 09:54 AM
@disoares wrote:
Thanks for the reply.
I understand your points and also understand that it will work both ways. I am still struggling to find an official guidance from Cisco.
The only thing I was able to find was Craig response - https://community.cisco.com/t5/identity-services-engine-ise/design-clarification-for-ise-pan-mnt-personas/m-p/3574288
His Cisco Live presentation is clear that both PAN and MNT should go on the same server. https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2018/pdf/BRKSEC-3699-reference.pdf (page 35)
But I would not consider a CISCO Live presentation an official guidance. Would like to here from someone within the BU an official answer.
Craig's answer is from the BU. Also what Damien says is correct.
https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: