topic I don't think so because in Network Access Control

ACS and WIndows Server 2012

jthullen — Mon, 11 Mar 2019 04:32:50 GMT

Hi all, does anyone happen to know if there is Remote Agent that will install and run on Windows Server 2012? I know we are way behind on code releases, we are running 4.2.0 ACS. We have been waiting for ISE to incorporate TACACS+, as that is the only thing we still use ACS for in our enviroment. Our server team is wanting to upgrade our Domain Controllers to Server 2012, and I am not sure there is a remote agent that would allow us to still tie back our ACS accounts to domian credentials. Please advise.

If we upgrade to ACS 5.X am I correct in thinking that like ISE, there is no need to load a remote agent on the DC's?

Remote agent doesn't support

Jatin Katyal — Mon, 17 Mar 2014 18:46:32 GMT

Remote agent doesn't support windows 2012. Only ACS 5.4 patch 2 supportes windows 2012 and that doesn't need remote agent as it uses inbuild Adagent to talk to active directory.

ACS 5.4 patch 2 supports Windows 2012 AD.

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/release/notes/acs_54_rn.html

Regards,

Jatin Katyal

*Do rate helpful posts*

Thank you for the reply Jatin

jthullen — Mon, 17 Mar 2014 18:53:40 GMT

Thank you for the reply Jatin. Sorry but I should have mentioned that the functional level of the AD will remain at 2008 for the time being. We just want to install the existing 4.2 remote agent on the 2012 Server, and I am not sure that will even install ont hat OS version. Any idea if it will?

I don't think so because

Jatin Katyal — Mon, 17 Mar 2014 19:02:10 GMT

I don't think so because functional level can only be checked during the auth phase. During installation it will check a underlying OS. ACS 4.2 doesn't even work well with Windows 2008 R2. Windows 2012 will not give you any luck for sure.

Supported OS with ACS 4.2

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/installation/guide/windows/IGwn42/install.html#wp1041324

You can give a try, will take few minutes.

Regards,

Jatin Katyal

*Do rate helpful posts*

Jatin, thank you again for

jthullen — Mon, 17 Mar 2014 19:10:12 GMT

Jatin, thank you again for your help. I feared that would be the answer. Sounds like we have to upgrade or get Cisco to support TACACS for within ISE very soon 🙂

Jeff

Well tacacs will be

Jatin Katyal — Mon, 17 Mar 2014 19:16:33 GMT

Well tacacs will be introduced in ISE 2.0. Currently, the ISE engeering team working/discussing to release ISE 1.3 this summer so difficult to comment on ISE 2.0 release date, should not be available for next year atleast.

Regards.

Jatin Katyal

*Do rate helpful posts*