Cisco ISE 2.1 (any takers?)

Started by LynK, October 12, 2016, 01:02:45 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

LynK

October 12, 2016, 01:02:45 PM
Hey guys,

Any of you guys upgrade ISE to 2.1 yet? What are your thoughts/concerns. We have to upgrade because 2.0.0.306 does not support windows 10/windows phone/later releases of android authentication.

Any of you on 2.1.0.474? How is it? Did they fix a lot of the TACACS+ junk? I did not much in the release notes.
Sys Admin: "You have a stuck route"
            Me: "You have an incorrect Default Gateway"

deanwebb

#1
October 12, 2016, 04:01:28 PM
No ISE here, sorry. We're a CounterACT shop. But we've had Win10 support for over a year.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

LynK

#2
October 13, 2016, 08:22:19 AM
please do not rub it in. Not to mention the TACACS issues on the current version we are on. Oh... and one more thing. It takes roughly 4 hours per box to do an upgrade.... sigh.
Sys Admin: "You have a stuck route"
            Me: "You have an incorrect Default Gateway"

deanwebb

#3
October 13, 2016, 12:08:25 PM
Well, going from 32-bit to 64-bit on CounterACT is a 24-hour long process. Ugh. And I have to call in about a box that went berzerk after having a RAM dump... and zero TACACS with CounterACT, although we've asked for it as a feature...
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

LynK

#4
October 13, 2016, 02:50:52 PM
yeah.... its frustrating, but oh well.
Sys Admin: "You have a stuck route"
            Me: "You have an incorrect Default Gateway"

deanwebb

#5
October 13, 2016, 08:11:29 PM
Funny thing is, working with NAC is kinda job security, provided you know how to get other teams on your side. Social networking is VERY important with doing NAC stuff.

Has Cisco helped provide you with stuff so you can lab out your NAC environment? You should have a dev and a pre-production lab, given all the mayhem NAC can cause when it gets angry.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

mlan

#6
October 17, 2016, 03:29:32 PM
This thread is not helping me feel good about ISE 2.x.  Is it worth upgrading at this point just to migrate TACACS+ over?

deanwebb

#7
October 18, 2016, 11:05:07 AM
ACS 5 is out and does the job. I'm pressing for ForeScout to include TACACS+ in future versions.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

LynK

#8
October 19, 2016, 01:41:02 PM
I cannot confidently recommend ISE to anyone who is looking to do TACACS. We are having a few issues, and until we know all of them are fixed I would try to use ACS.
Sys Admin: "You have a stuck route"
            Me: "You have an incorrect Default Gateway"
Print
Go Up Pages1
User actions