Security

C1000 are still supported, check your SKU number and verify for how long. Some C1000 SKU's are only supported until 2027-07-31, but other until 2030.

C2020 are end of sale, so you can't buy any of these.

In your case with about 2000 devices I would go for two virtual C1000V appliances. Just make sure you have full redundancy in the VM infrastructure and storage. Otherwise one physical and one virtual server. As the only difference between C1000V and C2000V is the amount of CPU and RAM allocated to the server you can just add more resources if you find the server slow in the GUI. But that may also depend on the storage performance.

C1000V will create a warning message in the Event log if you perform more than 40000 authentications per day, but this will not impact anything. With 2000 devices you should not risk to hit that counter, unless you have something flooding the network with authentication requests.

Balance the load between the servers.

Four servers sounds like overkill for an environment with just below 2000 endpoints.

Current hardware servers are N1000 and N3000/N3001. N1000 have replaced the C1000 model. N3000/N3001 replaces C30x0 servers and beyond. The difference between N3000 and N3001 is that N3001 have SFP+ interfaces and N3000 have RJ45 1 Gb interfaces. Same performance figures.

Hey Jonas,
thanks for your answer! Yes we do have some redundant Hypervisor Infrastructure so I will check if CP works on that. We use the C2000s with VIP in our campus environment where most of the devices live. The C1000 appliances were used in branch offices which have been closed down, two appliances survived this process but will be decomissioned soon. 

Can I still upgrade to 6.14.x with the C1000 & C2000 appliances? From there I would like to go with new appliances.

Cheers

C1000 are still supported, check your SKU number and verify for how long. Some C1000 SKU's are only supported until 2027-07-31, but other until 2030.

C2020 are end of sale, so you can't buy any of these.

In your case with about 2000 devices I would go for two virtual C1000V appliances. Just make sure you have full redundancy in the VM infrastructure and storage. Otherwise one physical and one virtual server. As the only difference between C1000V and C2000V is the amount of CPU and RAM allocated to the server you can just add more resources if you find the server slow in the GUI. But that may also depend on the storage performance.

C1000V will create a warning message in the Event log if you perform more than 40000 authentications per day, but this will not impact anything. With 2000 devices you should not risk to hit that counter, unless you have something flooding the network with authentication requests.

Balance the load between the servers.

Four servers sounds like overkill for an environment with just below 2000 endpoints.

Current hardware servers are N1000 and N3000/N3001. N1000 have replaced the C1000 model. N3000/N3001 replaces C30x0 servers and beyond. The difference between N3000 and N3001 is that N3001 have SFP+ interfaces and N3000 have RJ45 1 Gb interfaces. Same performance figures.