Monitor Mode in ISE or ACS

[aashirahmad]

can monitor mode be used with ise and acs or just ise?

[Jatin Katyal]

Cisco ISE Admin Group Roles and Responsibilities 

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_man_identities.html#wp1421693

Monitoring Admin

This role provides access to all monitoring and troubleshooting operations within the Cisco ISE administrative console, and can perform the following tasks:

•Manage all reports (run, create, and delete)

•Run all troubleshooting flows

•View the Cisco ISE dashboard and livelogs

•Manage alarms (create, update, view, and delete)

ACS 5.4 ( understanding Roles)

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/user/guide/admin_admin.html#wp1068633

Jatin Katyal


- Do rate helpful posts -

[Jatin Katyal]

ReadOnlyAdmin with ACS 5.4

This role is intended for ACS administrators who need read-only access to all parts of the ACS user interface.

This role has read-only access to all resources.

Creating, Duplicating, Editing, and Deleting Administrator Accounts

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/user/guide/admin_admin.html#wp1068758

Jatin Katyal


- Do rate helpful posts -

[mojuneja]

Monitor mode can be used with any AAA server, but you should position ACS/ISE

[Ravi Singh]

Monitor Mode allows organizations  to enable authentication across the wired infrastructure, without  affecting wired users or devices. It can be thought of as an "audit  mode". With the help of logging data for validation, a dministrators use  Monitor Mode to help ensure that all devices are authenticating  correctly, either with 802.1X or MAC Authentication Bypass. If a device  is misconfigured or is missing an 802.1X supplicant, access will not be  denied and simply logged.  For for more deatil you can see the below  link.

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_21_monitor_mode_deployment_guide.pdf