Cisco ISE Backup Fails -Repository validation: confd implementations

[rocteam]

Hello,

The ISE is set up to Backup automatically:
Configuration Data Backup - Daily
Operational Data Backup - Weekly
Repository - NFS

The Daily works fine, but the Weekly Operational Backup fails witht the message:
Repository (Rep_Name) validation failed due to error: confd implementatons

They both use the same Repo, that is why I do not know why it happens.

Thanks in advance for help.

[Aref Alsouqi]

I would suggest to get TAC involved before you restart the node as that would allow them to see the issue as it's happening and trying to find out the root cause.

[rocteam]

Yes, I already opened a TAC Case and uploaded logs, dumps, etc.
Will let you know if the problem is solved. 

[rocteam · Accepted solution]

I found the solution together with Cisco TAC!
Root cause was the firewall blocking connections between repositories and monitoring nodes.
In ISE when using GUI or scheduled backups:
- The config backups are done from admin nodes
- The operational backups are done from monitoring nodes
The firewall was not set up to allow connections from monitoring nodes - ONLY admin nodes.
That is why when performing operational backup from admin node using CLI, it was successfull - but not from GUI

After allowing the connections from all admin and monitoring nodes, all backups are working fine. 

Thank you for trying to find a solution.

[Aref Alsouqi]

You're welcome, and thanks for sharing the root cause and the solution.