Sizing VMs/SNS to support 25K concurrent endpoints

[elapaz]

Hello Experts,

Customer has 25K concurrent endpoints.

they need an HA deployment.

Network is a "star" topology with small branches connecting to the center (have a DR as well).

According to sizing docs SNS-3595 / Medium VM can handle up to 20K endpoints.

Which VM/SNS and how many should we use to support this number of endpoints?

Can we scale with SNS-3515 / Small VM ?

Appreciate any input.

Thank you.

Elad

[Jason Kunst · Accepted solution]

You need to move to a large deployment
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_00.html#DeploymentSizeandScalingRecommendations

[elapaz]

So we will need:

2x SNS3595 for NMT + PAN

? x SNS3515/SNS3595 as PSN ?

Will we need 3 PSNs 3595/Medium (N+1) so 25K nodes can always connect to a PSN ?

It will be very expensive solution.

Thank you

[Jason Kunst]

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId--1312516075

40k endpoints per PSN so 2 should suffice for HA using 3595 specs
Need 2 PAN/MNT for HA using 3495 specs

Keep in mind, 2.4 will only run on 3595 appliance

This page has links to performance and scale showing these key concepts as well:
https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944#toc-hId--635012047