What alarms are essential for ise tacacs authentication?

[oeksiqumh32]

Setting up stmp to receive alarm by mail.

If there are various alarms in ise, but you only use tacacs authentication

High Load Average

High Disk I/O Utilization

High Authentication Latency

And so on

Is it necessary to receive all of these things?

[Arne Bier]

ISE will send an email for ALL alarms ,if you configure an email address in a specific place - I would advise against configuring the email address there

Instead, go through the Alarms list and only configure your email recipients for specific alarms - the names are self explanatory. It's also a good idea to document which Alarms you have configured, because ISE doesn't make it easy (impossible) to see at a glance, which Alarms have email addresses associated with them. Example of one Alarm below:

[ccieexpert]

what i would suggest syslog the general stuff if you have siem etc/syslog servers and email the very critical ones. you dont want to be blased with 10s or 100s of emails.. so only critical ones.. you can also have the SIEM/syslog server take a alarm action to email you or open a case when a critical one is met.. more capabilty when you have a siem to fine tune stuff based on time of day etc..