Query on ISE 2.4 PSN threshold capacity

[mnazeeh]

Hi All,

We're working on a ISE deployment setup which is integrated with Meraki APs and Firepower. Interim accounting updates have been configured on the Merakis, for the user-IP mapping for the firewall policies.

As per Meraki behaviour, the first interim packet comes in only after 5 minutes, which means no user-IP mappings for 5 minutes.  This was further discussed with the Meraki BU, they have asked it to be brought down to 60 seconds. This would be mean, ISE would be receiving the below count of messages:

300 AP's x 25 users each = 7,500 messages/packets every 60 seconds, or possibly more if the users are more than 25.

Therefore the question is, if ISE is able to withstand those many Accounting packets in a second? This is an ISE 2.4 Medium VM.

Platform: ISE-VM-K9

Version: 2.4.0.357

Patch: 9



Disk: 644 GB

CPU_Cores: 16

RAM: 63 GB

[howon · Accepted solution]

The issue has been addressed on Meraki MR with version 26.6. See:

Customer can try beta or wait for GA.

[mnazeeh]

Thank you for the update. 

Will look forward to that update.