SNS-3595 log storage

[jineshrd]

Customer is planning to use 50K devices for TACACS & they would generate about 4 GB logs/day. We are positioning SNS-3595 in centralized deployment with HA. How much is the total log retention capacity for SNS-3595 in real world scenario? Is it good idea to have separate MnT for this use case? Customer is price sensitive as well. Please suggest.

[Jason Kunst · Accepted solution]

Recommend you look into ISE performance and scale
https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId--1112459193

Also cisco live performance and scale

BRKSEC-3699 - Designing ISE for Scale & High Availability
https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944#toc-hId--635012047

[jineshrd]

Thanks for the details.

SNS-3595 : 4 x 600-GB 10k SAS HDDs (1200 GB total)  ---> I see 1200GB is the total storage. How much of this storage is allocated to MnT node for storing logs in standalone deployment? Is it 60%?

[Jason Kunst]

Recommend looking at the slides 36 and 38 on this