Automatic monitoring of the health of an identity services engine

An apparatus comprising:

• a communication interface configured to enable network communications;
• a processing device coupled with the communication interface, and configured to:
• obtain, from a plurality of identity services engine (ISE) nodes within an ISE system, historical performance metrics for the plurality of ISE nodes;
• compute, based on the historical performance metrics, a model for the plurality of ISE nodes representing healthy behavior for the plurality of ISE nodes;
• obtain, from the plurality of ISE nodes, real-time performance metrics for the plurality of ISE nodes;
• compare the real-time performance metrics for the plurality of ISE nodes to the model for the plurality of ISE nodes;
• determine, based on the comparing, a health of the plurality of ISE nodes;
• and
• configure the ISE system to route network traffic away from unhealthy ISE nodes.

One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to:

• obtain, from a plurality of identity services engine (ISE) nodes within an ISE system, historical performance metrics for the plurality of ISE nodes;
• compute, based on the historical performance metrics, a model for the plurality of ISE nodes representing healthy behavior for the plurality of ISE nodes;
• obtain, from the plurality of ISE nodes, real-time performance metrics for the plurality of ISE nodes;
• compare the real-time performance metrics for the plurality of ISE nodes to the model for the plurality of ISE nodes;
• determine, based on the comparing, a health of the plurality of ISE nodes;
• and
• configure the ISE system to route network traffic away from unhealthy ISE nodes.