At my current job we have an older version of Cisco ACS that is going EOL soon. We've started looking into upgrading to the latest Cisco ACS server, which is version 5.5 I hear. Not only is it very expensive to go above 500 devices, but Cisco is telling us that this is the very last version of Cisco ACS that will ever be put out and that they want everyone to move to ISE instead. I'm guessing that will be several years in the future, but we're hesitant at paying so much money for what could be an eventual dead-end for us.
I find it a bit funny, especially since they don't even have an ISE server that does TACACS yet, and for those of us that want the ability to do things like Shell Command Authorization Sets, that's pretty critical since Radius can't do that to my knowledge. I've noticed there are a couple TACACS alternatives out there, like tac_plus, tacacs.net and clearbox. I'm just curious what people are planning on doing on their network, or if they are already moved away from Cisco's product, what are they using?
I'd really love to see Solarwinds put out a product geared at handling device management like this, to work in concert with NCM. And preferably not stick it to us with a huge pricetag like Cisco is with both the newer ACS servers and ISE. Wonder if there are any plans for that? Would be a nice addition to their current product line.