Re: OT - ISE first deployments / impressions

Thanks Ryan

1- The requirement for authentication / posture accessment for wired and VPN
- Can one ISE appliance do both the functionalites or does it required
dedicated ISE for VPN

2- The deisgn i was looking is 2 X ISE 3315 units for Wired Users in
Production Datacenter & 1 x 3315 ISE in the DR

How does the distibuted architecure and licensing work?

3- I am looking at design High Availilibity ( Active -Standby at Production
Datacenter) how does it work. As there is no concept like in the previous
release - NAC manager controlling all NAC server and NAC server having high
availibilty.

Regds-Nitin

On Wed, Oct 19, 2011 at 11:15 PM, Ryan West <rwest_at_zyedge.com> wrote:

> On Wed, Oct 19, 2011 at 15:11:03, Nitin Venugopal wrote:
> > Subject: Re: OT - ISE first deployments / impressions
> >
> > I am also working on a ISE design for 1200 endpoints-
> >
> > Have couple of related question-
> > Does VPN needs a dedicated appliance ?
>
> Depends on the overall load I believe, is the deployment for VPN only? You
> could run all roles on one device.
>
> > Does single advance license would suffice 3 standalone units in a
> > single deployment?
>
> Licensing is on end user node count and shared across the appliances that
> are joined together.
>
> > How does the HA work in reality ?
>
> I'll let you know what I find on this. Are you asking about shared
> addressing, replication, role sharing, etc..?
>
> >
> > Appreciate if some one can share more insight on this-
> >
>
> -ryan

Blogs and organic groups at http://www.ccie.net
Received on Wed Oct 19 2011 - 23:34:21 ART