Policy creation

[sujanyakj]

Where exactly we nees to configure the policy in ISE as we are having two options.

1.Policy -> Policy sets

2.Work center -  Device admin policy sets

For Authorization policy, i can see the result profile only if i configure the policy in policy sets.

But I will get the Default device admin server sequence only in the device admin policy sets.

[Arne Bier]

Hi @sujanyakj 

Device Admin is the term ISE uses for TACACS+ .

This confusing could be avoided if the ISE BU simply made another menu item called "Device Admin" or even better, call it by its real name "TACACS+" - instead of hiding this in the Work Center

The Policy Set menu is the RADIUS Policy Set

[sujanyakj]

Thank you. This is really helpfull.

We need to write our radius policies in policy sets and tacacs policies over device admin.I hope this is the currect understanding.

[Arne Bier · Accepted solution]

Yes. That’s exactly right.