We use TACACS+ extensively at work for all our network devices. The auth mechanism is krb 5.
We don't use it for Ironport, so I can't comment on that, specifically, but TACACS+ itself works great.
--kurt
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: