SNS3515 scalability

[jonathan-jackson]

Hi

we are after what total number of endpoints is if we do a fully distributed design, but using 3515 model for ISE PAN and MnT personas (on separate 3515's) and using 3595 for PSN personas?

The HLD only shows if we use larger model for PaN /MnT:

-100kwith ISE-3395 for PAN and MnT

•250kwith SNS-3495 for PAN and MnT

There is data showing 3515 can do 7500 endpoints but thats as shared persona Adm/Mnt.

Our design proposed has 4 x 3515 for PAN/MNT and 6 x 3595 to support ~20K endpoints.

Let me know.

Thanks Jon

[Jason Kunst · Accepted solution]

performance and scale info available here: ISE Performance & Scale

Our design guidance doesn't cover for 3515 as PAN/MNT in a large deployment for which is what you're proposing

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/install_guide/b_ise_InstallationGuide21/b_ise_InstallationGuide21_chapter_00.html

See Deployment size section table that indicates 3595 for separate PAN/MNT

The problem is that the 3515 doesn't have the necessary resources to scale past having 7500 endpoints