topic Re: ISE 2.3 SFTP repository error in Network Access Control

ISE 2.3 SFTP repository error

dwarren011 — Fri, 21 Feb 2020 18:34:46 GMT

After upgrading to 2.3 from 2.2 I am unable to validate the SFTP repo that worked prior. In another enviornment where I have 2.0 running the same repo validates and works properly. Is this a bug in 2.3? or do I have to use a different type of repo?

Re: ISE 2.3 SFTP repository error

Mohammed al Baqari — Tue, 26 Sep 2017 07:58:30 GMT

Try to import SFTP keys again. If not working, try to create new SFTP repo

Re: ISE 2.3 SFTP repository error

dwarren011 — Tue, 26 Sep 2017 15:39:06 GMT

When I try to reimport I get.

host-key add failed

Also I am using an external SFTP server

Re: ISE 2.3 SFTP repository error

dwarren011 — Tue, 26 Sep 2017 16:45:30 GMT

Ah found it in the manual. I should have RTFM.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01011.html

Enable RSA Public Key Authentication in SFTP Repository

Re: ISE 2.3 SFTP repository error

Mohammed al Baqari — Tue, 26 Sep 2017 17:03:34 GMT

Can you create new repo to same server and see if it works. Use different repo name

Re: ISE 2.3 SFTP repository error

Vinay-M. — Sat, 28 Apr 2018 06:16:29 GMT

I have same issue with ISE version 2.1 ( patch 6). I am no longer able to download upgrade file from SFTP server which was working earlier with same ISE on version 1.3. I am gettin SSH connection error on CLI mode. and download failed error on GUI. I have tried adding sftp repository with another name, Tried removing and adding crypto host key options..! I am using Window 2012 server as SFTP repository. Please help with this technical problem..! I am not able to upgrade ISE node to latest 2.3 version