topic Re: ISE AWS SFTP Transfer to S3 Issue in Network Access Control

ISE AWS SFTP Transfer to S3 Issue

courtlandmoore — Fri, 23 Aug 2024 20:52:58 GMT

I am trying to setup SFTP transfer service to S3 in my AWS deployment of ISE. I've tried to run backups and the ISE states they were sucessful. However, when I check the S3 bucket there are no files to be found. I turned on debug file transfer via CLI and see the below error. I am using PKI as the method of authentication and I've uploaded the generated pub key to my SFTP user in AWS.

ISE-01/iseuser#show repository CONFIG-Backup
6 [717196]:[info] transfer: cars_xfer.c[333] [system]: sftp dir of repository CONFIG-Backup requested
6 [717196]:[info] transfer: cars_xfer_util.c[2643] [system]: Server validation successful x.x.x.x
7 [717196]:[debug] transfer: sftp_handler.c[1270] [system]: Running sftp command: x.x.x.x isesftpuser *** /ise-repo/ ls -l /ise-repo/
3 [717196]:[error] transfer: sftp_handler.c[1094] [system]: sftp_run_parent Error: sftp_run_parent failed to read passphrase

Re: ISE AWS SFTP Transfer to S3 Issue

Mark Elsen — Sat, 24 Aug 2024 11:37:14 GMT

- Checkout (corrected) https://www.youtube.com/watch?v=nls6SzrK4Cw
presumably settings will remain the same for your ISE version ,

Re: ISE AWS SFTP Transfer to S3 Issue

courtlandmoore — Sat, 24 Aug 2024 15:51:24 GMT

This is the exact same video I used to set this all up. I have reviewed it several times to make sure I followed the steps correctly.

Re: ISE AWS SFTP Transfer to S3 Issue

Mark Elsen — Sat, 24 Aug 2024 15:56:25 GMT

- Is the Cisco-ISE version sufficiently recent ?

Re: ISE AWS SFTP Transfer to S3 Issue

courtlandmoore — Sat, 24 Aug 2024 18:22:17 GMT

I'm running version 3.3.0.430

Re: ISE AWS SFTP Transfer to S3 Issue

Mark Elsen — Sat, 24 Aug 2024 19:21:33 GMT

- I think you will need to invoke Cisco's TAC then (if desired)