09-05-2023 02:13 AM
Hi all,
First of all, I tried to find here similar issue, but I was not successful. Before I go and open the new TAC, I wanted to ask here.
I upgraded the 2node deployment 3.0p7 to 3.2p3 by backup and restore method.
Restoration disabled and removed scheduled backup as it is documented. This is fine and expected. So you have to schedule at least config backups from scratch. It seems operational data backups is not touched by restoration.
So I tried to configure Schedule Configuration Data Backup several times with the same result, after clicking save button, nothing has changed all the time. It returns to the previous screenshot above.
I tried FF and EDGE.
So for now until the solution would be described, I decided to use kron in CLI and configure ise-config backup from CLI instead of GUI. I know it is recommended from GUI, but if GUI does not work for me, so what should I do ?
kron occurrence dailybackup
at 22:30
recurring true
policy-list backup
kron policy-list backup
cli backup xxx repository yyy encryption-key plain zzz
Have you seen such issue ?
Solved! Go to Solution.
09-07-2023 07:09 PM
You're hitting a known 3.2p3 bug. I'm not aware of any workaround at this moment, I suggest contacting TAC to see if they have a workaround or hotfix. Reference this https://bst.cisco.com/bugsearch/bug/CSCwh39008
10-23-2023 06:13 AM - edited 10-23-2023 06:16 AM
HP is available by TAC.
I found out another bug with TAC, you could not even use KRON in CLI due to CSCwh87476.
It means right now only working config backup with HP in GUI, CLI KRON not at all:
ISE version GUI scheduled config backups working GUI scheduled operational backups working Any backups by KRON in CLI
3.2 patch 3 NO YES NO
3.2 patch 3 plus Hot patch provided by TAC YES YES NO
CSCwh39008 was said be resolved in next regular patch of 3.2 ISE which is patch 4.
CSCwh87476 is quite fresh and OPEN.
09-07-2023 04:07 PM
Have you tried clearing the browser cache entirely ?(you never know ...)
If that doesn't work then I reckon it's a TAC case. You might also try a reboot of the PAN.
The kron is a nifty workaround but it shouldn't have to come to that.
09-07-2023 07:09 PM
You're hitting a known 3.2p3 bug. I'm not aware of any workaround at this moment, I suggest contacting TAC to see if they have a workaround or hotfix. Reference this https://bst.cisco.com/bugsearch/bug/CSCwh39008
09-07-2023 07:26 PM
It looks like this bug is to be fixed in 3.2 patch 4, currently planned for release around 10 October (but could slip without notice).
The only current workaround is manual backup from GUI or CLI, so your kron job workaround is the best option. It's unclear if there is a hotfix available yet, so please check with TAC as suggested by @Damien Miller.
10-23-2023 06:13 AM - edited 10-23-2023 06:16 AM
HP is available by TAC.
I found out another bug with TAC, you could not even use KRON in CLI due to CSCwh87476.
It means right now only working config backup with HP in GUI, CLI KRON not at all:
ISE version GUI scheduled config backups working GUI scheduled operational backups working Any backups by KRON in CLI
3.2 patch 3 NO YES NO
3.2 patch 3 plus Hot patch provided by TAC YES YES NO
CSCwh39008 was said be resolved in next regular patch of 3.2 ISE which is patch 4.
CSCwh87476 is quite fresh and OPEN.
11-17-2023 12:15 PM - edited 11-21-2023 06:49 AM
I am doing an eval using v3.3.0.181 at the moment and am experiencing this issue as well (via the GUI). Have not tried kron yet though. Anyone else with 3.3 seeing this?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide