Cisco ISE

Darin Herteen synack at
Fri Oct 6 21:10:10 CST 2017

Any particular part of the product giving you trouble or just the migration to the product itself ?

Running 5.7 here a multi-vendor endpoint environment using both TACACS+ & RADIUS for device administration and have been curious about the pain I may or may not have ahead of me...

From: NANOG <nanog-bounces at> on behalf of Christopher J. Wolff <cjwolff at>
Sent: Friday, October 6, 2017 3:53 PM
To: Mann, Jason
Cc: nanog at
Subject: Re: Cisco ISE

Proceed with extreme caution.  You may want to have that end of life ACS deployment bake for another six months.  You will want to have the highest level of Cisco engineering engaged should you choose to go this direction.

On Oct 6, 2017, at 3:48 PM, Mann, Jason <jamann at<mailto:jamann at>> wrote:

As would I. We are going to start a project that is replacing ACS 5.7 with ISE 2.X

-----Original Message-----
From: NANOG [mailto:nanog-bounces at] On Behalf Of Christopher J. Wolff
Sent: Friday, October 6, 2017 2:41 PM
To: nanog at<mailto:nanog at>
Subject: Cisco ISE

Is anyone successfully deploying ISE 2.X?  I’m six months into it on about 10,000 endpoints and it seems like it’s a highly challenged product.  I’d love to hear your experiences on or off-list.  Thanks in advance.

More information about the NANOG mailing list