topic Re: scp from ISE in Network Access Control

scp from ISE

tsme — Mon, 22 Jun 2020 14:40:31 GMT

Hi,

has anybody experience with pulling data from ISE using scp?

I receive: Error getting tty, exiting
from a UnixServer I do

scp -vv admin@10.10.10.10:disk:/localRepo/PolicyConfig_Jun_22_2020_12_30_PM.xml .
..
debug1: Authentication succeeded (password).
Authenticated to 10.10.10.10 ([10.10.10.10]:22).
..
debug2: channel 0: request env confirm 0
debug1: Sending command: scp -v -f disk:/localRepo/PolicyConfig_Jun_22_2020_12_30_PM.xml
debug2: channel 0: request exec confirm 1
debug2: callback done
debug2: channel 0: open confirm rwindow 0 rmax 32768
debug2: channel 0: rcvd adjust 2097152
debug2: channel_input_status_confirm: type 99 id 0
debug2: exec request accepted on channel 0
debug2: channel 0: rcvd ext data 28

Error getting tty, exiting
..

Since the ciphers (ISE uses/supports (aes256-cbc aes128-cbc) to push backUps to a configured repository) are insecure and the remote host is blocking/terminating the SSH/SCP connection there are 2 options:

allow insecure ciphers on remote system
pull the Backup from ISE via SCP

No 1 is no option from NSO perspective.

No 2 is not supported from ISE? Or do I something wrong?

Re: scp from ISE

balaji.bandi — Mon, 22 Jun 2020 15:17:06 GMT

how about mentioned specific folder like /blblb/baallala/babab ( rather .)

scp -vv admin@10.10.10.10:disk:/localRepo/PolicyConfig_Jun_22_2020_12_30_PM.xml /root or which ever directory have permssion to copy ?

Re: scp from ISE

tsme — Tue, 23 Jun 2020 08:45:17 GMT

I did that but without success, same error message: Error getting tty

Re: scp from ISE

yogesh2009 — Tue, 23 Jun 2020 09:03:51 GMT

This is not supported. Check CSCvh78921 please

Re: scp from ISE

balaji.bandi — Tue, 23 Jun 2020 12:55:16 GMT

Sorry i have closed look and only below supported for now :

DISK:

FTP:

SFTP:

TFTP:

NFS:

CDROM:

HTTP:

HTTPS:

Re: scp from ISE

yogesh2009 — Fri, 26 Jun 2020 08:37:17 GMT

I am surprised this is not marked as solution yet.

Re: scp from ISE

tsme — Fri, 26 Jun 2020 10:04:13 GMT

I have hesitated because CSCvh78921 is referencing release: 2.1
I'm running v2.6 P7

Re: scp from ISE

Greg Gibbs — Mon, 29 Jun 2020 23:02:43 GMT

The bug is listed as an Enhancement. This functionality has not been implemented in any currently available versions of ISE (including 2.6).