ISE Guest with anchor mode

Hello guys,

I want to install ISE on my network, in addition to that, I am installing wireless anchor mode.

my question is that, should ISE be installed on the internal network and the authentication will be with the WLC that is installed on my internal network, or I should install 2 ISE nodes, one on the DMZ and one on the internal network?

thank you all.