Cisco ISE in Azure and Azure Site Recovery

[lee-holder]

My client is looking at migrating from their current On-Prem Cisco ISE deployment (2 x Physical ISE Appliances in separate Datacentres) to Azure.

Original intention is that they where looking at installing 2 x Axure Marketplace Cisco ISE Appliances in the same region but in separate Availability Zones, for HA and then use Azure Site Recovery for DR to a secondary region.

Has anybody done this and is it a supported configuration as receiving contradicting messages when I have tried to google this answer?

So basically the question is can ASR be used in Azure to provide DR for Cisco ISE?

Thanks  

[Torbjørn · Accepted solution]

Hello @lee-holder, welcome to the community!

This is not supported. Making backups of ISE using live snapshots is not reliable if you try. Your client will need to deploy two new appliances and use the ISE native backup & restore mechanisms for this.

You could back up your ISE nodes to an Azure VM that you can take backups of with Azure native tooling, and then restore backups from these in the DR environment if required. This way you won't need to maintain a separate backup solution for the singular purpose of ISE.