ISE keystroke logging

[mbyrne02]

Hi

Can ISE record the keystrokes entered into a network device by a user who has logged onto that device via TACACS

[balaji.bandi]

yes if the end network device is configured for accounting and Logging - ISE can that information, what device is this? 

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html

[mbyrne02]

Thanks for your reply

Its for all switches, I have nexus 5 and 7k plus numerous CAT 9k and HP. So if someone logs onto a switch and types control T

Where will I see this on ISE? DO I need to configure the specific device with AAA command configuration?

 

[balaji.bandi]

The above guide has that information where you need to look for Audit.

below deployment guide :

https://ciscocustomer.lookbookhq.com/iseguidedjourney/ISE-device-admin-global-settings?utm_campaign=ISE&utm_content=Guide&utm_source=Cisco.com-Open&utm_medium=ISE-Page-Device-Admin&pfhide=true

yes, you need to configure AAA on each device above guide help you.

yes, ISE support different mode of cisco and 3rd party.