01-23-2012 08:07 AM - edited 07-03-2021 09:25 PM
What is the big difference between the ACS and the ISE? We just purchased an ACS server to start locking down ports on our switches and use the Radius functions to better secure our wireless environment. It has been ordered but not yet arrived. I had a discussion with management today about preventing the IPads / IPhones / Smartphones / etc. of the world from accessing the network. If the user knows the credentials for getting their laptop onto the network then they can use these same credentials to get their IPad on the network. How do we detect and prevent is the current question.
In discussing with others the ISE comes up. The questions now become what is the big difference between this and the ACS. Do they work together or independently since they both seem to have "radius on steroids". Can I configure the ACS to do the same functions? I figure this will have to be something on a MAC address level anyway. Oh and one other thing. My wireless infrastructure is not Cisco.
Off to continue the research path ....
Brent
01-23-2012 08:13 AM
To put it simply I usually say ACS = RADIUS, ISE = NAC.
ISE will do RADIUS functions as well as NAC functions. Eventually you'll probably see ACS go away and be simply replaced by ISE.
ISE will do posturizing and profiling of a device to see if it truly meets requirements to be on a certain VLAN. For your example if you were to my credentials on my own smart device I would have access. ISE could profile this device to see if it truly is a corporate owned device or not. If it wasn't ISE can switch the network that the device connects to, say a guest network.
ISE can also do captive web portals for wired/wireless guest access.
I wouldn't rely on any type of MAC address authentication as I can easily spoof that.
01-23-2012 08:34 AM
You can check this
https://supportforums.cisco.com/docs/DOC-18121
https://supportforums.cisco.com/community/netpro/wireless-mobility/security-network-management/blog/2011/07/25/video-integration-of-cisco-identity-services-engine-ise-and-wireless-lan-controller-wlc
Thanks,
Vinay Sharma
Sent from Cisco Technical Support iPhone App
05-24-2013 07:01 AM
Hello,
For the better understanding about ISE, please go thorough this document:
05-24-2013 07:05 AM
Hello Naveen,
If you access without PDF the you can watch two embedded video links on this topic.
https://supportforums.cisco.com/docs/DOC-18121
Thanks,
Vinay Sharma
Community Manager
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: