Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Has anyone implemented ISE guest portal behind reverse proxy or Load balancer. My customer has a public cert on the load balancer(F5) ,which they want to leverage for guest authentication, instead of having a separate public cert on ISE. Currently LB...
What are the factors/dependencies that limits the maximum concurrent sessions & number of PSN’s in a Hybrid & dedicated distributed deployments.
Why there is a huge difference between hybrid and dedicated ISE deployment in max supported concurrent se...
In a distributed ISE deployment, what kind of issues are expected when the latency between Primary PAN and any PSN in the deployment goes beyond recommended level of 300ms?
Will that impact the authentication service of the PSN with high latency only...
Do we have any step-by-step procedure or migration guide for changing ISE deployment mode from hybrid (PAN/MNT on same node) to dedicated distributed mode.Just wanted to make sure, operational logs are retain on MNT. AFAIK, we can do this by followin...
Hi Arne,
Sorry for the delayed response, I was on travel last week.
I agree with your point, ideally LB should be inline to maintain the session persistency. In this case, LB is not inline between NAD and PSN. Only guest web page (redirect URL) sho...
Thanks Arne for your response.
However, In the current setup LB is not in line between NAD and PSN. The requirement is to only redirect ISE portal access via LB. For initial authentication, client will directly reach ISE on MAB auth (client-WLC-ISE) ...
Hi Damien,
You have mentioned medium VM should support both 3595 and 3655. But the official licensing guide (refer below URL) still says, medium VM license can have up to 64GB RAM. 3655 VM recommendations is 96GB. Could you please confirm if this h...
Got an update from SME.If WAN connection becomes unreliable and replication queue on Primary PAN and the affected PSN exceeds certain cut off limit, then it will disconnect the PSN from the deployment. In such situation, it will not impact the auth...
