topic Re: ACS user Change Password Utility Migration to ISE in Network Access Control

ACS user Change Password Utility Migration to ISE

Craig Rees — Tue, 30 Apr 2019 16:15:46 GMT

Looking to migrate from ACS 5.8 to ISE. We have several contractors hitting a ASA VPN that point to ACS, we are also using DUO for contractor VPN users. We currently use the “User change password (UCP) utility in ACS. This functionality is not currently in ISE- https://community.cisco.com/t5/security-documents/acs-vs-ise-comparison/ta-p/3649661#toc-hId-1175210155. How does Cisco plans to address this prior to Aug 31 2020 when ACS 5.8 goes end of support or what is the current recommendation from Cisco to replace this functionality.

Re: ACS user Change Password Utility Migration to ISE

Jason Kunst — Tue, 30 Apr 2019 17:17:17 GMT

We don’t discuss futures in ISE, please visit how to http://cs.co/ise-help under resources to reach out to our product managers for feature request

http://cs.co/ise-byod
under customization there is a workaround

Re: ACS user Change Password Utility Migration to ISE

Craig Rees — Tue, 30 Apr 2019 17:29:17 GMT

Todd Hyde from Cisco told me to post this question on the forum.

Re: ACS user Change Password Utility Migration to ISE

Arne Bier — Thu, 02 May 2019 11:11:43 GMT

Hi @Craig Rees

Interesting - I didn't know about this feature. It's quite true that there is no 100% feature parity between ISE and ACS and these questions come up from time to time. I would recommend putting in a feature request via the link below - it supposedly goes to the ISE PMs - I have received one or two responses in the past but most of the time it feels like it goes into a the bit bucket. But since you are Cisco internal you can pick up the phone ...

https://www.ciscofeedback.vovici.com/se.ashx?s=6A5348A7707FD7A6

Re: ACS user Change Password Utility Migration to ISE

Jason Kunst — Thu, 02 May 2019 11:45:09 GMT

Cisco internal use http://cs.co/ise-pm

There is the my devices portal made into a UCP on http://cs.co/ise-byod
You can also use sponsor portal (no customizations available)

Or try rolling your own with the API