Many ACS intances to One ISE Instance best practices migration

[Samuel Vuillaume]

Hey guys

My client is migrating 4xACS deployments to 1xISE instance. The migration allows only 1:1 ACS to ISE. So my client migrated their biggest ACS env to ISE.

What is then the best way for my client to import the other 3xACS env policies to the new ISE instance?

Thank you

Sam

[Cory Peterson · Accepted solution]

Currently there is no way to import Policy in to ISE therefor they would need to build them manually. 

As for the NADs, you can export all the NADs from ACS and then modify the exported CSV to match the ISE CSV import format to import all the NADs in to ISE. You can create an import template CSV from Work Centers --> Network Access --> Network Resources --> Network Devices --> Import Network Device 

[hslai]

Per Krishnan, the migration tool from ISE 2.2+ may selectively allow import and merge certain elements from ACS. For example, new users and new network devices can be imported into ISE. The device admin policies may be imported if ISE has only policies for network access.