Cisco ISE

Darin Herteen synack at live.com
Fri Oct 6 21:10:10 UTC 2017


Any particular part of the product giving you trouble or just the migration to the product itself ?


Running 5.7 here a multi-vendor endpoint environment using both TACACS+ & RADIUS for device administration and have been curious about the pain I may or may not have ahead of me...

________________________________
From: NANOG <nanog-bounces at nanog.org> on behalf of Christopher J. Wolff <cjwolff at nola.gov>
Sent: Friday, October 6, 2017 3:53 PM
To: Mann, Jason
Cc: nanog at nanog.org
Subject: Re: Cisco ISE

Proceed with extreme caution.  You may want to have that end of life ACS deployment bake for another six months.  You will want to have the highest level of Cisco engineering engaged should you choose to go this direction.

On Oct 6, 2017, at 3:48 PM, Mann, Jason <jamann at mt.gov<mailto:jamann at mt.gov>> wrote:

As would I. We are going to start a project that is replacing ACS 5.7 with ISE 2.X

-----Original Message-----
From: NANOG [mailto:nanog-bounces at nanog.org] On Behalf Of Christopher J. Wolff
Sent: Friday, October 6, 2017 2:41 PM
To: nanog at nanog.org<mailto:nanog at nanog.org>
Subject: Cisco ISE

Is anyone successfully deploying ISE 2.X?  I’m six months into it on about 10,000 endpoints and it seems like it’s a highly challenged product.  I’d love to hear your experiences on or off-list.  Thanks in advance.



More information about the NANOG mailing list