Authorization Policy & Device Admin Policy Sets in ISE.

[jackie_gx]

Using ISE v2.1. What the different of these 2:

1) Authorization policy : under Policy->Authorization

2) Device Admin Policy Sets : under Work Centers-> Device Administration

Want to use DACL for anyconnect users, where should i add in the policy?

[ognyan.totev · Accepted solution]

Device Admin Policy Sets these sets are for manage access of  network devices like switch router etc. And this will help you

ISE Device Administration (TACACS+)

to understand more .

2. Cisco Identity Services Engine Administrator Guide, Release 2.1 - Manage Authorization Policies and Profiles [Cisco Ide…

this will help you too.

3. VPN Filters on Cisco ASA Configuration Example - Cisco this is third document .

[hslai]

The first one is for RADIUS and the second is for TACACS+. DACL is usually associated with RADIUS.

Ognyan is correct that TACACS+ is usually employed for network device administration.