topic ISE backup frequency in Network Access Control

ISE backup frequency

tachyon05 — Mon, 17 May 2021 21:31:03 GMT

Currently I have scheduled ISE backup (both configuration and operational) to run daily. The operational backups are about 10 x as big as the configuration backup, and I am wondering if there is a need to backup this up so frequently. My understanding is the operational backups contain logs and troubleshooting data, but I can't imaging a scenario where I will need to restore from operational backup. I am inclined to change this from daily to weekly or even monthly (mostly to save disk space). Am I missing something here? Thanks

Re: ISE backup frequency

Damien Miller — Mon, 17 May 2021 22:32:35 GMT

I wouldn't take operational backups because they are simply just the RADIUS and TACACS logs. Unless there is a reason you foresee having to restore these logs, then backing them up is not in your best interest. If you don't back them up and have to rebuild both MNTs, then your logging will start at day 1, when both MNTs were rebuilt.

By default you are also only keeping 30 days of RADIUS/TACACS logs.

Re: ISE backup frequency

Peter Koltl — Wed, 19 May 2021 21:01:07 GMT

Tachyon05: I came exactly to the same conclusion.