cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
843
Views
0
Helpful
2
Replies

ISE VM 2.4 stopped connecting to SFTP Server after upgrading to Patch 6

dadelacr
Level 1
Level 1

Hi.  I wonder if anyone encountered this:

After upgrading the ISE VM 2.4 to Patch 6, ISE is no longer able to connect to the SFTP Server.

SFTP Server Software: CoreFTP

No changes and/or upgrades were done on the Core FTP Server.

Furthermore, our ISE used to have an SFTP Server Repository configured with the name of "SFTP".  When we deleted it the, the ise is still giving us the error of: 

Alarm Name :
Scheduled Report Export Failure

Details :
Scheduled report export failed. Unable to copy the exported file to repository. Server=ise02; Copying exported report file to repository failed. Scheduled Report: 'Rejected_or_Released_Endpoints'; Repository Name: 'SFTP'.

Description :
Unable to copy the exported report CSV file to configured repository.

Severity :
Info

Suggested Actions :
Verify the configured repository - If deleted, add it back. If not available/reachable, re-configure the repository to a valid one.

*** This message is generated by Cisco Identity Services Engine (ISE) ***

Sent By Host : ise02

 


I noticed that even if the SFTP Server named: "SFTP" has been deleted from the ISE, ISE is still trying to send out reports to the deleted SFTP Server.


It seems that ISE is still sending it to the repository named "SFTP" even after we have removed it from the configuration.

2 Replies 2

hslai
Cisco Employee
Cisco Employee

If not already done, please engage Cisco TAC to troubleshoot this issue. We need check the interactions between ISE and your SFTP server and see how various algorithms and encryptions are negotiated and exchanged.

Regarding the scheduled report using the deleted repository, please perform the suggested action.

RaffyLindogan
Spotlight
Spotlight

Hi mate,

 

I have experienced similar issue before (backup was stuck and it doesn't allow me to cancel).
Even removing the SFTP from cli, and rebuild the config it still didn't allow it.

I had to raise TAC case and they installed root patch and have to manually stop the process that is stuck.

 

Cheers,


Raffy