Cisco ISE 1.4 Guest Account Backup

[apocalypse_nsl]

I currently deploy the self register portal for guest, I have following questions want to certify, just want to know anybody face the same issue as me.

1) Except REST API any way to export the guest account

2) Schedule backup will include guest account or not

3) When 2 node deployment, guest account will sync on both node?

Sorry for poor English.

Regards,

Alan

[Jatin Katyal · Accepted solution]

1.] I don't think so - I can see a feature request on the same though

CSCty82007    ENH: Export Guest Accounts Configured in ISE

2.] Yes - backup should have all guest accounts.

3.] The Cisco ISE guest services make use of the Distributed Management System of the Cisco ISE to allow multiple Cisco ISE nodes to work in a deployment. Configurations made on the primary node are replicated to the secondary nodes.

~ Jatin

[TM13]

This feature not released?

[Jason Kunst]

This thread is old. Not sure what exactly you’re looking for. 1.4 is eol eos

There isn’t a feature to export guest accounts via GUI

Ise 2.2 has vast improvements in api ability to do CRUD operations on guest accounts

[TM13]

Hi Jason,

  We have 2.2, but can you give more details about "api ability to do CRUD operations" ? means possible to pull all Guest access details and import back to ISE?

[Jason Kunst]

With ISE 2.2 you should be able to export accounts via guest API and then import on another system. The ability to set the password came in 2.2 API as well

There is no way to export via the GUI. Please reach out via your account manager for the capability as feature request.

https://community.cisco.com/t5/security-documents/ise-guest-sponsor-api-tips-amp-tricks/ta-p/3636773#toc-hId-1767282147

https://community.cisco.com/t5/security-documents/cisco-wireless-guest-solutions-comparison-ise-wlc-emsp/ta-p/3640399 

https://community.cisco.com/t5/policy-and-access/ise-v1-3-how-do-you-export-guest-user-accounts/td-p/2736896