Can I export Authentication and Authorization Policy and server config via CLI in ISE?

[AlexPi]

Hello All,

We have an issue with ISE and we need to understand if we can export the policies he have on our ISE via CLI so we can then proceed in importing them to a new ISE server.

Also to the same effect is there the possibility to export the configuration of the ISE server via the CLI?

Thanks,

Alex

[marce1000]

 - FYI : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215355-how-to-take-configuration-and-operation.html

 M.

[AlexPi]

Thanks for that marce.

I still do not see any reference to exporting ISE policies via CLI, are you aware if this is feasible?

Best regards,

Alex P.

[Greg Gibbs · Accepted solution]

No, there is currently no mechanism to export and import ISE policies via CLI, GUI, or API. The GUI does have an option to export the Policy via XML, but there is no option to import it. This is feature is mainly used by TAC.

Configuration backup and restore is the only method.