Security

 View Only
Expand all | Collapse all

Concurrent Connections ClearPass Appliance

This thread has been viewed 8 times
  • 1.  Concurrent Connections ClearPass Appliance

    Posted Jun 06, 2025 09:42 AM

    Hi,

    there are currently 3 appliances available: N1000, N3000 and N3001.

    According to the datasheets the N1000 provides advanced policy control for up to 1000 concurrent sessions while the N3000/N30001 provides advanced policy control for up to 100.000 concurrent sessions.

    Are these numbers hard-capped? For instance we have round about 1100 concurrent sessions. What will the N1000 hardware/software do in that case?



  • 2.  RE: Concurrent Connections ClearPass Appliance

    Posted Jun 06, 2025 11:33 AM

    There are no hard coded limits, so the only limitation is from performance view.

    From the sizing guide you can also see the number of authentications during bursts.

    Look at the table and do some calculations based on your environment if the server can handle the bursts.

    If you have too high load on a physical server it will become slow, especially in Access Tracker.

    I would recommend to have two servers for redundancy, and with two servers you can share the load on both of them.

    If I would go with a N1000 pair if I was in your situation. 

    I have a customer who had C1000 server and they are designed for 40000 authentications per day. But some misconfigurd devices caused massive 802.1x and MAC authentications with over 100000 authentications per day and these servers continued to work but with severe performance impact.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------