Hi Guys
I’m trying to export ACS policies from ACS 5.8.1.4 to be imported later on ISE 2.2 using the ACS-MigrationApplication-2.2.0 tool.
I’m able to export all objects except the Access Plicies. In the Migration tool logs I see that the Service Selection Policy is not supported.
Below the different logs:
===================================================================================
ACS 5.8
ACSLab
=======================================================================
ASEAPTLSPhone
=======================================================================
Rule: SSPPhoneEAPTLS
Description: Enabled SSP rule 'SSPPhoneEAPTLS' points on a service that is not a network
access service. This is not supported by ISE
=======================================================================
ASMD5Phone
=======================================================================
Rule: SSPPhoneMD5
Description: Enabled SSP rule 'SSPPhoneMD5' points on a service that is not a network
access service. This is not supported by ISE
----------------------------------------------------------------------
=======================================================================
DefaultNetworkAccess
=======================================================================
Rule: Radius
Description: Enabled SSP rule 'Radius' points on a service that is not a network access
service. This is not supported by ISE
-----------------------------------------------------------------------
=======================================================================
DefaultDeviceAdmin
=======================================================================
Rule: Tacacs
Description: Enabled SSP rule 'Tacacs' points on a service that is not a network access
service. This is not supported by ISE
-----------------------------------------------------------------------
=======================================================================
Summary:
*Service Selection Policy : Unsupported
*Authentication Policy : Supported
*Authorization Policy : Supported
Not all policies are compatible with ISE 2.2. Out of security concerns,
the migration application will not migrate any of your ACS 5.5/5.6/5.7/5.8
policies.
=======================================================================
End of Report
=======================================================================
I have attached the different Access Services in the Lab.
I have suspected the: ANY and the compound conditions with AND and OR but they are not the issue.
Any suggestion will be appreciated! Don't hesitate if you need any further information
Best regards
