ACS is used to authenticate users to network devices and for VPN sessions but it is not a NAC solution wherein it will not be able to control the network by checking the compliance state of the devices in the network.
ISE is the next generation of network authentication and is so much more powerful than ACS. If you want to implement full network access control you need ISE.
