Cisco Secured Network Server Series Appliances and Virtual Machine Requirements

Cisco ISE hardware and virtual appliance requirements

Cisco ISE can be installed on Cisco Secure Network Server (SNS) hardware or virtual appliances. The virtual machine should have the same system resources as the Cisco SNS hardware appliances to achieve similar performance and scalability as the Cisco ISE hardware appliance. This section lists the hardware, software, and virtual machine requirements for installing Cisco ISE.


Note

Harden your virtual environment and ensure that all security updates are current. Cisco is not liable for any security issues found in hypervisors.


Caution

Cisco ISE does not support VM snapshots to back up data on any virtual environment. Enabling the Snapshot feature on the VM might corrupt the configuration. If this happens, you may need to reimage the VM.

Cisco SNS hardware appliances

For Cisco SNS 3500 series appliances, see Cisco SNS-3500 Series Appliance Hardware Installation Guide.

For Cisco SNS 3600 series appliances, see Cisco SNS-3600 Series Appliance Hardware Installation Guide.

For Cisco SNS 3700 series appliances, see Cisco SNS-3700 Series Appliance Hardware Installation Guide.


Note

Cisco ISE 3.1 does not support Cisco SNS 3515 appliance. For information about the supported hardware platforms for Cisco ISE 3.1, see Supported Hardware.

Support for Cisco SNS 3700 series appliance

The Cisco SNS 3700 series appliances are based on the Cisco Unified Computing System (Cisco UCS) C220 Rack Server and are specifically configured to support Cisco ISE. Cisco SNS 3700 series appliances are designed to deliver high performance and efficiency for a wide range of workloads.

The Cisco SNS 3700 series appliances are available in these models:

  • Cisco SNS 3715 (SNS-3715-K9)

  • Cisco SNS 3755 (SNS-3755-K9)

  • Cisco SNS 3795 (SNS-3795-K9)

The Cisco SNS 3715 appliance is designed for small deployments. Cisco SNS 3755 and Cisco SNS 3795 appliances have several redundant components such as hard disks and power supplies and are suitable for larger deployments that require highly reliable system configurations. Cisco SNS 3795 is recommended for PAN and MnT personas.

Cisco ISE Release 3.1 Patch 6 and later versions support Cisco SNS 3700 series appliances.


Note

SNS 3700 series appliances are pre-installed with an ISE release. To re-image an SNS 3700 series appliance with Cisco ISE Release 3.1 Patch 6, you must use the following image:

ise-3.1.0.518c.SPA.x86_64_SNS-37x5_APPLIANCE_ONLY.iso

This table describes the hardware specifications of Cisco SNS 3700 series appliances.

Table 1. Cisco SNS 3700 series appliance hardware specifications

Cisco SNS 3700 series appliance

Hardware specifications

Cisco SNS-3715-K9

  • Cisco UCS C220 M6

  • Intel Xeon Silver 4310 CPU 2.10 GHz

  • 12 CPU Cores, 24 Threads

  • 32 GB RAM

  • 1 x 600-GB HDD, 1 x 800-GB SSD, or 1 x 900-GB SED

  • RAID-0

  • 2 x 10Gbase-T

    4 x 10GE SFP

Cisco SNS-3755-K9

  • Cisco UCS C220 M6

  • Intel Xeon Silver 4316 CPU 2.30 GHz

  • 20 CPU Cores, 40 Threads

  • 96 GB RAM

  • 4 x 600-GB HDD, 4 x 800-GB SSD, or 4 x 900-GB SED

  • RAID 10

  • 2 x 10Gbase-T

    4 x 10GE SFP

Cisco SNS-3795-K9

  • Cisco UCS C220 M6

  • Intel Xeon Silver 4316 CPU 2.30 GHz

  • 20 CPU Cores, 40 Threads

  • 256 GB RAM

  • 8 x 600-GB HDD, 8 x 800-GB SSD, or 8 x 900-GB SED

  • RAID 10

  • 2 x 10Gbase-T

    4 x 10GE SFP

Note

  • You cannot add additional hardware resources like memory, processor, or hard disk to a Cisco SNS 3700 series appliance.

  • Installing Cisco ISE on SNS hardware appliance requires at least six NICs. By default, all SNS hardware appliances are delivered with six NICs.

  • Mixing SAS/SATA hard drives and SAS/SATA SSDs is not supported. You must use either SAS/SATA hard drives or SAS/SATA SSDs.

  • SSD offers improved performance in disk read/write operations and other Cisco ISE operations like boot, installation, upgrade, and database-intensive tasks like backup, reports generation, and so on.

  • SFPs must be ordered separately. For component part numbers, see Cisco UCS C-Series Rack Server Data Sheet.

For more information, see the Cisco SNS-3700 Series Appliance Hardware Installation Guide.

VMware virtual machine requirements

You can use the VMware migration feature to migrate VM instances (running any persona) between hosts. Cisco ISE supports both hot and cold migration.

  • Hot migration is also called live migration or vMotion. You do not need to shut down or power off Cisco ISE during hot migration. You can migrate the Cisco ISE VM without any interruption in its availability.

  • Cisco ISE must be shutdown and powered off for cold migration. Cisco ISE does not allow to stop or pause the database operations during cold migration. Hence, ensure that Cisco ISE is not running and active during the cold migration.


    Note

    You must use the application stop command before using the halt command or powering off the VM to prevent database corruption issues.

Cisco ISE offers these OVA templates that you can use to install and deploy Cisco ISE on VMs:

  • ISE-3.1.0.518b-virtual-SNS3615-SNS3655-300.ova

  • ISE-3.1.0.518b-virtual-SNS3615-SNS3655-600.ova

  • ISE-3.1.0.518b-virtual-SNS3655-SNS3695-1200.ova

  • ISE-3.1.0.518b-virtual-SNS3695-1800.ova


    Note

    If you want to import the SNS 3695 OVA template to the VMware vCenter content library, you can use the ISE-3.1.0.518b-virtual-SNS3695-1800.ova template. This OVA template is similar to the ISE-3.1.0.518b-virtual-SNS3695-2400.ova template, except for the reserved disk size, which has been reduced from 2400 GB to 1800 GB to workaround a limitation in the Vmware vCenter content library that prevents import of OVAs with disk size larger than 2 TB.

  • ISE-3.1.0.518b-virtual-SNS3695-2400.ova

  • ISE-3.1.0.518b-ESXi-6.5-virtual-SNS3615-SNS3655-300.ova

  • ISE-3.1.0.518b-ESXi-6.5-virtual-SNS3615-SNS3655-600.ova

  • ISE-3.1.0.518b-ESXi-6.5-virtual-SNS3655-SNS3695-1200.ova

  • ISE-3.1.0.518b-ESXi-6.5-virtual-SNS3695-1800.ova

  • ISE-3.1.0.518b-ESXi-6.5-virtual-SNS3695-2400.ova


    Note

    If you are using ESXi 6.5, you must use the OVA templates with ESXi-6.5 in the filenames. The other OVA templates are for ESXi 6.7 and later versions.

    When you are using ESXi 6.5, you might see the following warning message:

    The configured guest OS (Red Hat Enterprise Linux 7 (64-bit)) for this virtual machine does not match the guest that is currently running (Red Hat Enterprise Linux 8 (64-bit)). You should specify the correct guest OS to allow for guest-specific optimizations.

    However, this does not have any functional impact. For more information, see CSCwb45787.

The 300 GB OVA templates are sufficient for Cisco ISE nodes that serve as dedicated Policy Service or pxGrid nodes.

The 600 GB and 1.2 TB OVA templates are recommended to meet the minimum requirements for nodes that run the Administration or Monitoring persona.

If you need to customize the disk size, CPU, or memory allocation, you can manually deploy Cisco ISE using the standard .iso image. However, it is important that you ensure the minimum requirements and resource reservations specified in this document are met. The OVA templates simplify ISE virtual appliance deployment by automatically applying the minimum resources required for each platform.

Table 2. OVA template reservations

OVA template type

Number of CPUs

CPU reservation (in GHz)

Memory (in GB)

Memory reservation (in GB)

Evaluation

4

No reservation.

16

No reservation.

Small

16

16

32

32

Medium

24

24

96

96

Large

24

24

256

256

Reserve CPU and memory resources to match the required allocation. Not reserving enough resources can significantly affect ISE performance and stability.

This table lists the VMware virtual machine requirements.

Table 3. VMware virtual machine requirements

Requirement type

Specifications

CPU

  • Evaluation

    • Clock speed: 2.0 GHz or faster

    • Number of CPU cores: 4 CPU cores

  • Production

    • Clock speed: 2.0 GHz or faster

    • Number of cores:

      • SNS 3500 series appliance:

        • Medium: 16

        • Large: 16

          Note

           

          The number of cores is twice that found in the equivalent Cisco SNS 3500 series, due to hyperthreading.

      • SNS 3600 series appliance:

        • Small: 16

        • Medium: 24

        • Large: 24

          Note

           

          The number of cores is twice that found in the equivalent Cisco SNS 3600 series because of hyperthreading. For example, in a small network deployment, you must allocate 16 vCPU cores to meet the CPU specification of SNS 3615, which has 8 CPU cores or 16 threads.

Memory

  • Evaluation: 16 GB

  • Production

    • Small: 32 GB for SNS 3615

    • Medium: 64 GB for SNS 3595 and 96 GB for SNS 3655

    • Large: 256 GB for SNS 3695

Hard disks

  • Evaluation: 300 GB

  • Production

    300 GB to 2.4 TB of disk storage (size depends on deployment and tasks).

    We recommend that your VM host server use hard disks with a minimum speed of 10,000 RPM.

Note

 

When you create the VM for Cisco ISE, use a single virtual disk that meets the storage requirement. If you use more than one virtual disk to meet the disk space requirement, the installer may not recognize all the disk space.

Storage and file system

The storage system for the Cisco ISE virtual appliance requires a minimum write performance of 50 MB per second and a read performance of 300 MB per second. Deploy a storage system that meets these performance criteria and is supported by VMware server.

You can use the show tech-support command to view the read and write performance metrics.

We recommend the VMFS file system because it is most extensively tested, but other file systems, transports, and media can also be deployed provided they meet the above requirements.

Disk controller

Paravirtual or LSI Logic Parallel

For best performance and redundancy, a caching RAID controller is recommended. Additionally, battery-backed controller cache can significantly improve write operations.

Note

 

Updating the disk SCSI controller of a Cisco ISE VM from another type to VMware Paravirtual may render it not bootable.

NIC

1 NIC interface required (two or more NICs are recommended; six NICs are supported). Cisco ISE supports E1000 and VMXNET3 adapters.

Note

 

We recommend that you select E1000 to ensure correct adapter order by default. If you choose VMXNET3, you might have to remap the ESXi adapter to synchronize it with the Cisco ISE adapter order.

VMware virtual hardware version/Hypervisor

  • VMware version 9 for ESXi 6.5

  • VMware version 14 for ESXi 6.7 and ESXi 7.0

  • OVA templates: VMware version 14 or higher on ESXi 6.7, ESXi 7.0, and ESXi 8.0.

  • ISO file supports ESXi 6.7, ESXi 7.0, and ESXi 8.0.

Linux KVM requirements

Table 4. Linux KVM requirements

Requirement type

Minimum requirements

CPU

  • Evaluation

    • Clock speed: 2.0 GHz or faster

    • Number of cores: 4 CPU cores

  • Production

    • Clock speed: 2.0 GHz or faster

    • Number of cores:

      • SNS 3500 series appliance:

        • Medium: 16

        • Large: 16

          Note

           

          The number of cores is twice that of an equivalent Cisco SNS 3500 series appliance, due to hyperthreading.

      • SNS 3600 series appliance:

        • Small: 16

        • Medium: 24

        • Large: 24

          Note

           

          The number of cores is twice that of an equivalent Cisco SNS 3600 series appliance, due to hyperthreading. For example, for a small network deployment, you must allocate 16 vCPU cores to match the CPU specification of SNS 3615, which has 8 CPU cores or 16 threads.

Memory

  • Evaluation: 16 GB

  • Production

    • Small: 32 GB for SNS 3615

    • Medium: 64 GB for SNS 3595 and 96 GB for SNS 3655

    • Large: 256 GB for SNS 3695

Hard disks

  • Evaluation: 300 GB

  • Production

    300 GB to 2.4 TB of disk storage (size depends on deployment and tasks).

    We recommend using hard disks with a minimum speed of 10,000 RPM on your VM host server.

    Note

     

    When you create the VM for Cisco ISE, use a single virtual disk that meets the storage requirement. If you use multiple virtual disks to meet disk space requirements, the installer might fail to detect the total disk space.

KVM Disk Device

Disk bus - virtio, cache mode - none, I/O mode - native

Use preallocated RAW storage format.

NIC

1 NIC interface required (two or more NIC interfaces are recommended; six NIC interfaces are supported).

Cisco ISE supports VirtIO drivers. We recommend VirtIO drivers for better performance.

Hypervisor

KVM on QEMU 2.12.0-99 or above

Microsoft Hyper-V requirements

Table 5. Microsoft Hyper-V requirements

Requirement type

Minimum requirements

CPU

  • Evaluation

    • Clock speed: 2.0 GHz or faster

    • Number of cores: 4 CPU cores

  • Production

    • Clock speed: 2.0 GHz or faster

    • Number of cores:

      • SNS 3500 series appliance:

        • Medium: 16

        • Large: 16

          The number of cores is twice that of the equivalent Cisco SNS 3500 series due to hyperthreading.

      • SNS 3600 series appliance:

        • Small: 16

        • Medium: 24

        • Large: 24

          Note

           

          The number of cores is twice that of the equivalent Cisco SNS 3600 series, due to hyperthreading. For example, for a Small network deployment, you must allocate 16 vCPU cores to meet the CPU specification of SNS 3615, which has 8 CPU cores or 16 threads.

Memory

  • Evaluation: 16 GB

  • Production

    • Small: 32 GB for SNS 3615

    • Medium: 64 GB for SNS 3595 and 96 GB for SNS 3655

    • Large: 256 GB for SNS 3695

Hard disks

  • Evaluation: 300 GB

  • Production

    300 GB to 2.4 TB of disk storage (size depends on deployment and tasks).

    We recommend that your VM host server use hard disks with a minimum speed of 10,000 RPM.

Note

 

Create the VM for Cisco ISE with a single virtual disk that meets the storage requirement. If you use multiple virtual disks, the installer may not detect the total disk space.

NIC

1 NIC interface required (two or more NICs are recommended, and six NICs are supported).

Hypervisor

Hyper-V (Microsoft)


Note

Cisco ISE supports Azure Stack HCI 23H2 and later versions. The virtual machine requirements and the installation procedure for the Cisco ISE VMs in the Azure Stack HCI are the same as that of Microsoft Hyper-V.

Nutanix AHV requirements

Cisco ISE must be deployed on Nutanix AHV using the standard Cisco ISE .iso image. You cannot deploy Cisco ISE using OVA templates on Nutanix AHV.

This table specifies the recommended resource reservations for different types of deployment on Nutanix AHV:

Type Number of CPUs CPU reservation (in GHz) Memory (in GB) Memory reservation (in GB) Hard disks

Evaluation

4

No reservation

16

No reservation

300 GB
Small 16 16 32 32 600 GB
Medium 24 24 96 96 1.2 TB
Large 24 24 256 256 2.4 TB (4*600 GB)

You must do these configuration on Nutanix AHV before you install Cisco ISE:

  • Create a VM on Nutanix AHV and keep the VM powered off.

  • If you are using AOS 6.8 or earlier versions, access the Nutanix CVM using ssh login and run these commands:

    • $acli

    • <acropolis> vm.serial_port_create <Cisco ISE VM Name> type=kServer index=0

    • <acropolis> vm.update <Cisco ISE VM Name> disable_branding=true

    • <acropolis> vm.update <Cisco ISE VM Name> disable_hyperv=true

    If you are using AOS 7.0, access the Nutanix CVM using ssh login and run these commands:

    • <acropolis> vm.serial_port_create <Cisco ISE VM Name> type=kServer index=0

    • <acropolis> vm.update <Cisco ISE VM Name> disable_branding=true

  • Exit Acropolis CLI, power on the VM, and install Cisco ISE using the standard .iso image.

Table 6. Nutanix AHV requirements

Requirement type

Minimum requirements

CPU

  • Evaluation:

    • Clock speed: 2.0 GHz or faster

    • Number of cores: 2 CPU cores

  • Production:

    • Clock Speed: 2.0 GHz or faster

    • Number of Cores

      • Small: 12 processors (6 cores with hyperthreading enabled)

      • Large: 16 processors (8 cores with hyperthreading enabled)

Cisco ISE supports hyperthreading. We recommend that you enable hyperthreading, if it is available.

Note

 

Hyperthreading can improve overall performance, but supported scaling limits for each virtual machine appliance remain unchanged. Allocate CPU resources based on the required number of physical cores instead of logical processors.

Memory

  • Evaluation:

    • Basic: 4 GB (for evaluating guest access and basic access policy flows)

    • Advanced: 16 GB (for evaluating advanced features such as pxGrid, Internal CA, SXP, Device Administration, and Passive Identity Services)

  • Production:

    • Small: 16 GB

    • Large: 64 GB

Hard disks

  • Evaluation: 300 GB

  • Production:

    300 GB to 2 TB of disk storage (size depends on deployment and tasks).

    We recommend that your VM host server use hard disks with a minimum speed of 10,000 RPM.

    Note

     

    You must use four 600 GB hard disks for 2.4 TB hard disk support.

KVM disk device

Disk bus - SCSI

NIC

1 GB NIC interface required (two or more NICs are recommended; six NICs are supported).

Cisco ISE supports VirtIO drivers. We recommend VirtIO drivers for better performance.

Hypervisor

AOS - 5.20.1.1 LTS, Nutanix AHV - 20201105.2096

AOS - 6.8, Nutanix AHV - 20230302.100169

AOS - 6.8 and 7.0, Nutanix AHV - 10.0

VMware cloud solutions for Cisco ISE

On any public cloud platform, configure your VPN to allow the VMware engine to connect to on-premises deployments and to other required devices and services. You can deploy Cisco ISE on VMware cloud solutions using these public cloud platforms:

  • VMware Cloud on Amazon Web Services (AWS): Host Cisco ISE on a software-defined data center provided by VMware Cloud on AWS. Configure the appropriate security group policies on VMware Cloud (in the Networking and Security > Security > Gateway Firewall Settings page) to allow access to on-premises deployments and other required devices and services.

  • Azure VMware Solution: Azure VMware Solution runs VMware workloads natively on Microsoft Azure. You can host Cisco ISE as a VMware virtual machine.

  • Google Cloud VMware Engine: The Google Cloud VMware Engine runs software-defined data centers by VMware. You can host Cisco ISE as a VMware virtual machine using the VMware Engine.

For more information on deploying Cisco ISE on cloud platforms, see Deploy Cisco Identity Services Engine Natively on Cloud Platforms.

Virtual machine size recommendations

The VM appliance specifications should match those of physical appliances used in a production environment.

Follow these guidelines when allocating resources for the appliance:

  • Do not share or oversubscribe resources across multiple guest VMs. Use OVF templates to assign adequate resources. If you install Cisco ISE manually using the ISO image, ensure you assign equivalent reservations.

    If you do not allocate the specified resources, performance degradation or service failure might occur. To avoid these issues, deploy dedicated VM resources.

    If you deploy Cisco ISE manually without the recommended reservations, you must closely monitor your appliance’s resource utilization. Increase resources as needed to ensure proper health and functioning of the Cisco ISE deployment.

  • If you are using the OVA templates for installation, check these settings in the Edit Settings page (under the Virtual Hardware tab), after the installation is complete:

    • Ensure that you assign the resource reservations that are specified in the VMware virtual machine requirements section in the CPU/Memory Reservation field to ensure proper health and functioning of the Cisco ISE deployment.

    • Ensure that the CPU usage in the CPU Limit field is set to Unlimited. Setting a limit for CPU usage impacts system performance. If a limit is set, shut down the VM client, remove the limit, and restart the client.

    • Ensure that the memory usage in the Memory Limit field is set to Unlimited. Setting a limit for memory usage will impact the system performance.

    • Ensure that the Shares option is set as High in the Hard Disk area.

      Admin and MnT nodes rely heavily on disk usage. Using shared disk storage VMware environment might degrade disk performance. You must increase the number of disk shares allocated to a node to improve performance.

  • You can deploy Policy Service nodes on VMs with less disk space than Administration or Monitoring nodes. The minimum disk space for any production Cisco ISE node is 300 GB.

  • VMs can be configured with one to six NICs. Configure VMs with at least two NICs when possible. Additional interfaces support services such as profiling, guest services, or RADIUS.


Note

If you decrease the RAM or CPU allocation for a VM, you must reimage Cisco ISE with the new VM configuration. However, increasing the RAM or CPU capacity does not require reimaging.

Disk space requirements for VMs in a Cisco ISE deployment

This table lists the Cisco ISE disk-space allocation recommended for running a VM in a production deployment.


Note

To boot a GPT partition with 2 TB or more, change the firmware from BIOS to EFI in the VM settings boot mode.

Table 7. Recommended disk space for VMs

Cisco ISE persona

Minimum disk space for evaluation

Minimum disk space for production

Recommended disk space for production

Maximum disk space

Standalone Cisco ISE

300 GB

600 GB

600 GB to 2.4 TB

2.4 TB

Distributed Cisco ISE, Administration only

300 GB

600 GB

600 GB

2.4 TB

Distributed Cisco ISE, Monitoring only

300 GB

600 GB

600 GB to 2.4 TB

2.4 TB

Distributed Cisco ISE, Policy Service only

300 GB

300 GB

300 GB

2.4 TB

Distributed Cisco ISE, pxGrid only

300 GB

300 GB

300 GB

2.4 TB

Distributed Cisco ISE, Administration and Monitoring (and optionally, pxGrid)

300 GB

600 GB

600 GB to 2.4 TB

2.4 TB

Distributed Cisco ISE, Administration, Monitoring, and Policy Service (and optionally, pxGrid)

300 GB

600 GB

600 GB to 2.4 TB

2.4 TB


Note

Additional disk space is required to store local debug logs and staging files. Extra space is also needed to handle log data during an upgrade, when the Primary Administration node temporarily becomes a Monitoring node.

Disk space guidelines for Cisco ISE

Consider these guidelines when determining the disk space for Cisco ISE:

  • Cisco ISE must be installed on a single disk in a VM.

  • Disk allocation varies based on logging retention requirements. On any node that has the Monitoring persona enabled, 60 percent of the VM disk space is allocated for log storage. A deployment with 25,000 endpoints generates approximately 1 GB of logs per day.

    For example, if you have a Monitoring node with 600 of GB VM disk space, 360 GB is allocated for log storage. If 100,000 endpoints connect to this network every day, it generates approximately 4 GB of logs per day. In this case, you can store 76 days of logs in the Monitoring node, after which you must transfer the old data to a repository and purge it from the Monitoring database.

For extra log storage, you can increase the VM disk space. For every 100 GB of disk space that you add, you get 60 GB more for log storage.

If you increase the disk size of your virtual machine after initial installation, perform a fresh installation of Cisco ISE. This ensures that Cisco ISE properly detects and uses the full disk allocation.

This table shows the retention period for RADIUS logs on your Monitoring node based on disk space and endpoint count. These values are based on these assumptions: Ten or more authentications per day per endpoint with logging suppression enabled.

Table 8. Monitoring node log storage (retention period in days for RADIUS)

Number of endpoints

300 GB

600 GB

1024 GB

2048 GB

5,000

504

1510

2577

5154

10,000

252

755

1289

2577

25,000

101

302

516

1031

50,000

51

151

258

516

100,000

26

76

129

258

150,000

17

51

86

172

200,000

13

38

65

129

250,000

11

31

52

104

500,000

6

16

26

52

This table shows the TACACS+ log retention period on your Monitoring node based on disk space and endpoint count. These values are based on these assumptions: The script runs against all NADs, 4 sessions per day, and 5 commands per session.

Table 9. Monitoring node log storage (retention period in days for TACACS+)

Number of endpoints

300 GB

600 GB

1024 GB

2048 GB

100

12,583

37,749

64,425

128,850

500

2,517

7,550

12,885

25,770

1,000

1,259

3,775

6,443

12,885

5,000

252

755

1,289

2,577

10,000

126

378

645

1,289

25,000

51

151

258

516

50,000

26

76

129

258

75,000

17

51

86

172

100,000

13

38

65

129

Increase disk size

If the context and visibility functions are slow or storage space for logs is not sufficient, you must allocate more disk space.

For every 100 GB of disk space that you add, 60 GB is available for log storage.

To enable Cisco ISE to detect and use the new disk allocation, you must deregister the node, update the VM settings, and reinstall Cisco ISE. You can install Cisco ISE on a new, larger node and add that node to the deployment for high availability. After synchronizing the nodes, configure the new VM as the primary node and deregister the original VM.

Decrease disk size

If you reduce the VM reservations after installing Cisco ISE, you must perform these steps:

  1. Perform a backup of Cisco ISE.

  2. Re-image Cisco ISE with the updated VM configuration.

  3. Restore Cisco ISE.