Have a customer with the following setup with a Virtual ISE deployment - Separate PSN running 2.4 with latest patch PSN interfaces are setup as follows: Eth0 - is intended to be used as management only with communication to PAN, MnT, DNS, NTP, AD etc...