Which feature of ISE is Terminal Access Control System (TACACS) a part of?

TACACS+ (Terminal Access Controller Access-Control System Plus) is the protocol used within Cisco ISE's Device Administration feature to control who can access network devices such as routers and switches via CLI. It provides granular command-level authorization, allowing administrators to restrict which commands specific users or groups can execute on a managed device. TACACS+ separates its authentication, authorization, and accounting functions independently, making it the preferred protocol for network device access control in ISE.

Device Profiling in ISE is the process of identifying and classifying endpoints on the network using collected attributes such as DHCP or RADIUS data, which does not involve TACACS+.

Centralized policy management is a broad ISE capability describing how security policies are defined and distributed, not a specific feature that TACACS+ is categorized under.

Guest access management uses web portals and RADIUS-based authorization flows to onboard guest users, not the TACACS+ protocol.