Cisco Secure Access Control System vs ISE

[David James]

Can someone tell me what the difference is between these two systems?  Is there a feature on one that I can not use on the other?

[David Niemann · Accepted solution]

TACACS+ to begin.  No tacacs on ISE in its present form.  I'm basically transitioning all user radius based auth to ISE and keeping admin tacacs based auth on ACS.  ACS does DACLs, but only based on user or group membership.  ISE does DACLs based on very customizable rules and posture assessment.

[David James]

That was exactly the answer I was looking for. Of course the idea of being able to leverage ISE for TACACS+ would have been nice.

Thanks

[David Niemann]

There was some speculation about TACACS eventually being added to ISE, but I haven't seen anything indicating that yet.

[Jatin Katyal]

Tacacs support wll be introduced in ISE 2.0 and that is scheduled for next year.

Jatin Katyal


- Do rate helpful posts -