Every ACS secured network is different, but often they share the same basic fundamental scheme where one or more ACS server pairs (or "clusters") are installed for each service being secured. For services with a large number of endpoints there may be multiple ACS clusters dedicated to that service - for example a cluster at each campus.

example reporting solution

Typically, one PC is used as a dedicated "reporting server" with both csvsync and aaa-reports! installed. Often this server is rack-mounted with access via Terminal Services or other remote access software.

Some customers choose to run multiple copies of aaa-reports! to keep reporting of each network service physically separated. This can be for security reasons or just for "separation of concerns" as in the example below of a network partitioned into "inner" and "perimeter".

A partitioned multi-service deployment