topic Re: ACS migration to ISE - info about features and licensing in Network Access Control

ACS migration to ISE - info about features and licensing

MarcoLazzarotto — Wed, 27 Jul 2022 16:17:46 GMT

Hello,
I need some help to fully understand what license I need to buy for our first ISE purchase.
Currently we are using Cisco ACS 5.x and I'm planning to migrate to a more recent product.
I'm oriented to ISE because looks like the natural successor to ACS.

I'm not sure about what license can give me access to the old DACL, of which we make a great use.
Features that we use are:

AD authentication
DACL
DUO 2FA
users, groups
authentication to multiple firewalls and switches

Please note that the first 3 features are used by us with AnyConnect as well.

And given that I'm not very familiar with this technology and given the complexity of ISE licensing, I demand your help to figure out what license fits me bets between Premier, Advantage and Essentials.

Re: ACS migration to ISE - info about features and licensing

ahollifield — Wed, 27 Jul 2022 16:54:15 GMT

Essentials should cover everything you describe. https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-656177.html

Re: ACS migration to ISE - info about features and licensing

MarcoLazzarotto — Wed, 27 Jul 2022 17:19:47 GMT

That's the site on which I spent a good amount of time, but I'm still not sure if DACL are included into the Essentials license

Re: ACS migration to ISE - info about features and licensing

ahollifield — Wed, 27 Jul 2022 17:41:12 GMT

Yes, dACL is included in Essentials.