[196156] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Cisco ISE

daemon@ATHENA.MIT.EDU (Darin Herteen)
Sat Oct 7 06:07:55 2017

X-Original-To: nanog@nanog.org
From: Darin Herteen <synack@live.com>
To: "Christopher J. Wolff" <cjwolff@nola.gov>, "Mann, Jason" <jamann@mt.gov>
Date: Fri, 6 Oct 2017 21:10:10 +0000
In-Reply-To: <BA4EC1AC-0F20-411C-BF23-294518A581C2@nola.gov>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

Any particular part of the product giving you trouble or just the migration=
 to the product itself ?


Running 5.7 here a multi-vendor endpoint environment using both TACACS+ & R=
ADIUS for device administration and have been curious about the pain I may =
or may not have ahead of me...

________________________________
From: NANOG <nanog-bounces@nanog.org> on behalf of Christopher J. Wolff <cj=
wolff@nola.gov>
Sent: Friday, October 6, 2017 3:53 PM
To: Mann, Jason
Cc: nanog@nanog.org
Subject: Re: Cisco ISE

Proceed with extreme caution.  You may want to have that end of life ACS de=
ployment bake for another six months.  You will want to have the highest le=
vel of Cisco engineering engaged should you choose to go this direction.

On Oct 6, 2017, at 3:48 PM, Mann, Jason <jamann@mt.gov<mailto:jamann@mt.gov=
>> wrote:

As would I. We are going to start a project that is replacing ACS 5.7 with =
ISE 2.X

-----Original Message-----
From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Christopher J. Wo=
lff
Sent: Friday, October 6, 2017 2:41 PM
To: nanog@nanog.org<mailto:nanog@nanog.org>
Subject: Cisco ISE

Is anyone successfully deploying ISE 2.X?  I=92m six months into it on abou=
t 10,000 endpoints and it seems like it=92s a highly challenged product.  I=
=92d love to hear your experiences on or off-list.  Thanks in advance.

home help back first fref pref prev next nref lref last post