Cisco ISE - CLI Accounting We've recently installed a POC for Cisco ISE and have confirmed that we are able to log into the switches that poll it for RADIUS information. Since we've moved from TACACS+, we can't seem to find the area of ISE that contains the accounting information for commands entered on the switches/routers that poll ISE. Is there a comparable tool on ISE? Will it require extra commands be entered on the config level?

> It was my understanding that Cisco's ACS+ was EOL, which is why we were moving to ISE in the first place.

Somewhere there was a misunderstanding because Cisco ACS 5.6 is currently supported.

> Are you suggesting that we use ACS+ or are you saying ISE cannot perform accounting?

ISE is basically just a fancy RADIUS server, which is heavily focused on EAP / 802.1X. Save yourself pain and suffering, don't hammer the square peg (ISE) into a round hole (CLI accounting). Cisco ACS is designed for CLI accounting; ISE isn't.