We are currently using DUO as our MFA provider for our AnyConnect sessions, on an ASA5555-X.  It is working fine, but we are switching providers to Okta.  The trick is going to testing and rollout/.  We have a LOT of employees, so we can't just hot c...

I am running ISE 2.3 as a tacacs+ server.  I have it working well with my Cisco devices.  It is integrated with AD as an external identity source.  I am using a default authentication policy that checks against AD.  I also have a couple different aut...