topic ISE Tacacs+ "Publish to Remote Database" in Network Access Control

ISE Tacacs+ "Publish to Remote Database"

yongwli — Wed, 17 Jan 2018 05:54:10 GMT

Hi Team,

Does ISE support "Publish to Remote Database" function as ACS does? Customer would send Taccas+ record to outside database.

Thanks

Re: ISE Tacacs+ "Publish to Remote Database"

howon — Wed, 17 Jan 2018 22:12:21 GMT

Currently not supported. See: ACS vs ISE Comparison

Re: ISE Tacacs+ "Publish to Remote Database"

yongwli — Thu, 18 Jan 2018 13:51:34 GMT

many thanks

Re: ISE Tacacs+ "Publish to Remote Database"

kthiruve — Thu, 18 Jan 2018 17:06:34 GMT

We have enhanced the logging capacity in ISE 2.2 so that ISE uses more disk space to dynamically store the logs. ISE supports exporting these logs as well.

Please see ISE Performance and scale<https://communities.cisco.com/docs/DOC-68347#jive_content_id_TACACS_log_retention_Days> for additional details on TACACS+ log retention.

Also like ACS, ISE can send logs to remote targets such as Splunk that is a syslog server.

Due to the addition of these functionalities, ability to send logs to a remote db will never be part of ISE as mentioned in ACS vs ISE Comparison<https://communities.cisco.com/docs/DOC-63901> page.

-Krishnan