topic Re: Import ISE policy set 2.4 in Network Access Control

Import ISE policy set 2.4

JESSICA Walsh — Fri, 28 Sep 2018 19:15:30 GMT

How do you import ISE policy sets? They can be exported, therefore they have to be able to be imported, but I can't find the place to do this. Does anyone know?

Re: Import ISE policy set 2.4

Damien Miller — Fri, 28 Sep 2018 19:21:11 GMT

The ability to import them does not exist yet. Hopefully it is implemented in the future.

Re: Import ISE policy set 2.4

Arne Bier — Sat, 29 Sep 2018 12:10:32 GMT

It was meant to be introduced in ISE 2.4 but it got dropped last minute. I am keeping fingers crossed that it makes it into 2.5 ... the beta for 2.5 was supposed to start this week but has been postponed into the middle of October.

Re: Import ISE policy set 2.4

Jason Kunst — Sat, 29 Sep 2018 13:44:21 GMT

Didn’t make it in 2.5, can’t discuss futures here sorry

Re: Import ISE policy set 2.4

HumanTorch — Thu, 03 Jan 2019 18:52:17 GMT

What is the purpose of exporting policies in XML if you can't import them anywhere?

In migrating from older installations (1.x to 2.x) a lot of customers want to start with a fresh installation instead of a multi tiered upgrade. In that case, policies have to be re-created. Import would be great and then they can edit or fine tune them.

Re: Import ISE policy set 2.4

Jason Kunst — Thu, 03 Jan 2019 18:54:27 GMT

for now you can use for troubleshooting large rule sets.

Re: Import ISE policy set 2.4

Arne Bier — Thu, 03 Jan 2019 21:57:07 GMT

Hi @Jason Kunst - I have downloaded a few of these in my life time but I have not been able to view them in a way that makes it easy to understand, or to spot mistakes. I understand that it's XML and there are XML viewers/editors etc. But they just display the data in some hierarchy and it's not user friendly. Any tips or tools that you know of to make this more human readable?

I agree that Policy Import would one day be a nice to have feature 🙂

Re: Import ISE policy set 2.4

hslai — Fri, 04 Jan 2019 15:31:08 GMT

I usually use a web browser to view such XML files, although the libraryConditions are not grouped properly into one BIG hierarchy so I need manually collapse them one-by-one. Below shows the output from Safari on my macOS desktop.