Hi my name is Ivan:
I have a cisco ise v2.2 working with tacacs + services and I would like to know how can I configure it to observe all the commands that are executed in a catalyst switch 2960-x, which I use as a client tacacs +. Everything works ok, you can see the reports in the ise, such as that person is authenticated, authorize, and even the reports of the policies, but what we do not see are all those commands that they use in the catalyst switch, like for example, if the user write on the switch: show run, shutdown, no ip ...., configure terminal,
I have a license device admin.
We need to audit all the commands and will see in the reports tacacs+ of the cisco ise.
Can someone help me set this up?
Regards.
