09-27-2021 05:22 AM
We are in the process of migrating from Cisco ACS TACACS control of router/switch access to ISE TACACS control. Within the Cisco ACS TACACS system, a very heavily used report is when the password for a user was changed and how (admin, user, etc.) Is there an equivalent report within ISE TACACS that shows when an internal work center TACACS account has had a changed password and by whom?
Further Data which might be of value:
ISE Version 3.0.+
Programmatic tool for migration from ACS failed. Cisco TAC unable to recreate. Manual migration performed.
Work Center Identities using internal user database for TACACS user accounts.
All security functions seem to be working as expected WRT router/switch TACACS user authentication and authorizations.
Solved! Go to Solution.
09-27-2021 08:33 AM
ISE 3.0 has a built in report for this, you can access it under the Operations > Reports > Audit and it will be called "User Change Password Audit".
09-27-2021 08:33 AM
ISE 3.0 has a built in report for this, you can access it under the Operations > Reports > Audit and it will be called "User Change Password Audit".
09-27-2021 09:01 AM
I've been looking in the work center area. There are reports there, but not "operations". Too many report locations. TACACS is the guest, got to get my head wrapped around that concept. Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide