cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

4857
Views
0
Helpful
1
Replies
Highlighted
Beginner

Is it possible to import ISE Policy Sets?

I want to take a policy set from one ISE instance and place it on another.

Exporting ISE policy sets is possible as per ISE admin guide:

Export Authentication and Authorization Policy Configuration

You can export authentication and authorization policy configuration in the form of an XML file that you can read offline to identify any configuration errors and use for troubleshooting purposes. This XML file includes authentication and authorization policy rules, simple and compound policy conditions, dACLs, and authorization profiles. You can choose to email the XML file or save it to your local system.


Step 1  Choose Administration > System > Backup & Restore.
Step 2  Click Policy Export.
Step 3  Enter the values as needed.
Step 4  Click Export.

Use a text editor such as WordPad to view the contents of the XML file.

However, I can't find anything that states about importing policy sets. Is importing policy sets even possible? If not, what would be the easiest way to do that?

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Beginner

Re: Is it possible to import ISE Policy Sets?

I cannot find a way to do it, I asked the question to a Cisco ISE field engineer and he said no. At least the exported XML you can cut and paste from it to replicate the exported rules.

View solution in original post

1 REPLY 1
Beginner

Re: Is it possible to import ISE Policy Sets?

I cannot find a way to do it, I asked the question to a Cisco ISE field engineer and he said no. At least the exported XML you can cut and paste from it to replicate the exported rules.

View solution in original post