topic Re: TACACS support to authenticate GUI Admin Access in Network Access Control

TACACS support to authenticate GUI Admin Access

umahar — Fri, 03 Aug 2018 21:03:28 GMT

Can ISE authenticate GUI Administrators via an external TACACS server ?

Re: TACACS support to authenticate GUI Admin Access

Jatin Katyal — Fri, 03 Aug 2018 22:24:25 GMT

In Cisco ISE, you can authenticate administrators via an external identity store such as Active Directory, LDAP, or RSA SecureID.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_0101.html

Re: TACACS support to authenticate GUI Admin Access

hslai — Sat, 04 Aug 2018 23:27:46 GMT

In case this inquiry is about ISE admin web UI access, then see Jatin Katyal's reply. In another word, ISE admin interfaces (web or cli) is not supporting T+.

In case this inquiry is about whether ISE T+ services may use to authenticate administrators in accessing the GUI of network devices, such depends on the network devices. In our training lab, we showed WLC, PI, and ASDM using ISE to authenticate the admin access to their web or Java interfaces.