topic Re: ISE without DNAC in Network Access Control

ISE without DNAC

tedens — Tue, 17 Aug 2021 10:53:09 GMT

Hi,

I am looking for an overview of ISE functionality in the case a customer has no (or plans for) DNAC.

so what are we missing in a ISE-only deployment (with Cisco Cat9K switches).

Can we still do all the AAA functions, (micro) segmentation, SGT's, assign policies to SGT's etc ?

many thanks !

Re: ISE without DNAC

Dustin Anderson — Tue, 17 Aug 2021 15:37:25 GMT

As far as I know you should be able to do everything without DNAC. We don't do SGTs, but we do AAA, TACACS, dACLs etc with no issues. We just pulled out DNAC due to licensing costs.

Re: ISE without DNAC

Milos_Jovanovic — Tue, 17 Aug 2021 17:48:08 GMT

Hi @tedens,

As @Dustin Anderson said, you can do all of mentioned with pure ISE deployment. DNAC should brign additional automation on top of your existing equipment, but all functionalities are still there.

BR,

Milos

Re: ISE without DNAC

hslai — Thu, 19 Aug 2021 02:11:37 GMT

I agree with Milos and Dustin.

https://cs.co/ise-videos has a playlist of Cisco ISE Intro and should get you started and the ISE Webinars playlist gives you deep dive into different topics.