Cisco Ise Minimum Requirements

A full list of ecosystem partners is available here: cisco.com/go/csta •For an ISE system on a VMware server, the minimum disk space allocation is 60 GB. The 60 GB of disk space can provide all the functionality for any of the following types of ISE nodes: VMware version 8 (default) for ESXi 5.x (at least 5.1 U2) For more information about vMotion requirements, see the VMware documentation. If you need to adjust the disk size, processor, or memory allocation, you can manually deploy Cisco ISE using the default .iso image. However, it is important that you ensure that the minimum requirements and resource reservations specified in this document are met. OVA templates simplify ISE virtual appliance deployment by automatically applying the minimum resources required for each platform. We recommend the VMFS file system because it is the most widely tested file system, but other file systems, transports, and media can also be deployed as long as they meet the above requirements. VMware Virtual Machine Hardware version 8 or later on ESXi 5.x (at least 5.1 U2) and 6.x. Download the Identity Services Engine software from software.cisco.com. Cisco ISE provides a number of methods to verify that your storage system meets these minimum requirements before, during, and after Installing Cisco ISE. For more information, see .

Note VMware Server version 2.0 is supported only to illustrate ise release 1.0. For a trial or production version, the minimum storage space is 60 GB. Customers who purchased the old virtual machine licenses must purchase a Product Authorization Key (PAK) for each virtual machine license purchased when upgrading to ISE 2.4, 2.6, and 2.7. To receive a PAH, email ise-vm-license@cisco.com. Enter the sales order numbers that reflect the ISE VM purchase and your Cisco ID in your email. Cisco, in turn, will provide a mid-range vm PAK that reflects virtual machine specifications before the introduction of small, medium, and large VM licenses with ISE 2.4. A medium VM PAK can be used with small and medium VM installations. Specific License Reservation (SLR) is an intelligent licensing method that allows you to manage your smart licenses when your organization`s security requirements do not allow for a persistent connection between Cisco ISE and CSSM.

SLR allows you to reserve specific license rights on a Cisco ISE PAN. You create a DSLR by defining the type and number of licenses you need to reserve, and then enable reservation on a Cisco ISE node. The Cisco ISE node where you register and enable reservation then tracks license usage and enforces license consumption compliance. A DSLR can only be activated on the Cisco ISE node for which it is generated. Session-based licensing follows a tiered pricing model where pricing depends on the number of sessions and the duration of the subscription. Sales representatives and partners must determine the correct size for each customer deployment so that the appropriate number of sessions is selected (at least 100 sessions). Cisco Commerce (CCW) dynamically determines the correct price associated with the number of sessions entered. The following table lists the VMware requirements for virtual machines. Be sure to read and allocate virtual machine resources according to the requirements specified in this chapter. Cisco ISE virtual appliances are supported on VMware ESX/ESXi 5.x and 6.x, KVM on RedHat Enterprise Linux (RHEL) 7, and Amazon Web Services (AWS).

Virtual appliances must run on hardware that matches or exceeds the physical platform configurations listed in the Cisco ISE datasheet. The Cisco ISE virtual target must meet the required storage and disk space requirements, which can be found in the installation guide here: Cisco Identity Service Installation Guide. For more information about Cisco ISE on AWS, see Installing Cisco ISE with Amazon Web Services. Download Cisco ISE software from the Cisco software download site on www.cisco.com/en/US/products/ps11640/index.html and burn it to a DVD. You must provide your credentials Cisco.com. Step 5 Select a datastore that has at least 60 GB of free space and click Next. Cisco Software Support Basic is included for the duration of Cisco ISE subscription licenses. Higher quality service levels, solution support, or enhanced or premium software support can be purchased by selecting the appropriate level of support from the support options. Note that solution support is not available for ISE Plus and Apex licenses. Pricing for these higher-value service levels is dynamically calculated based on a percentage of the cost of the product and must meet the minimum annual requirements as required.

The Cisco ISE Virtual Appliance storage system requires a minimum write performance of 50 MB per second and a read performance of 300 MB per second. Deploy a storage system that meets these performance requirements and is supported by VMware Server. tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y It is recommended that your virtual machine host server use disks at a minimum speed of 10,000 rpm. Disk allocation varies depending on the retention requirements for logging. On each node where the monitoring persona is enabled, 60% of the virtual machine space is allocated for log storage. A deployment with 25,000 endpoints generates approximately 1 GB of logs per day. A minimum of 4 GB of RAM is required to evaluate guest access and basic access policy flows. To evaluate advanced features such as pxGrid, internal CA, and SXP, we recommend that you configure your virtual machine with 16 GB of RAM after deploying the Eval OVA. You can also download ISE, 1.0 software from the Cisco software download site: www.cisco.com/public/sw-center/index.shtml. Before you install the ISE server, make sure that the VMware server has at least 60 GB of allocated disk space. For more information, see Configuring a VMware ESX 3.x or 4.0 Server. If you need to renew your trial licenses for more than 90 days or more than 100 endpoints, please open a file with www.cisco.com/go/scm with your UDI, license application, and rationale.

Cisco Identity Services Engine (ISE) can be installed on Cisco SNS hardware or virtual appliances. To achieve performance and scalability comparable to that of the Cisco ISE hardware appliance, the virtual machine must have system resources that match the Cisco 3500 or 3600 series SNS appliances. This section lists the hardware, software, and virtual requirements to install Cisco ISE. For the evaluation, the minimum requirements for allocating a disk on a virtual machine are 200 GB. If you are moving the virtual machine to a production environment that supports a larger number of users, be sure to reconfigure the Cisco ISE installation to the recommended minimum disk size or larger (up to the maximum allowed size of 1,999 TB). 60 GB is the minimum block size required to install VMware with ISE. However, ISE only uses up to a maximum of 600 GB, even if you allocate additional space to your virtual machine. Policy Service nodes on virtual machines can be deployed with less disk space than management or monitoring nodes. The minimum storage space for each Cisco ISE production node is 300 GB. For more information about disk space requirements for different Cisco ISE nodes and personas, see. The 600 GB and 1.2 TB OVA models are recommended to meet the minimum requirements for ISE nodes running Persona Administration or Monitoring.

For more information about disk space requirements, see. For evaluation purposes, ISE Version 1.0 can be installed on any supported VMware virtual server machine that meets the requirements for virtual machines. When you evaluate ISE, version 1.0, you can configure less space in the virtual machine, but you must still allocate at least 60 GB of disk space. Anyone can download ISO and OVA files from ISE 2.4 or later for evaluation. A valid cisco.com connection is required to download the software. An existing ISE support contract may be required to download additional patches or packages. Note There is no distinction between the minimum disk space required for VMware servers used for evaluation or a production deployment.