New ISE Implementation - Questions about the Guest User Base

[Jalmeida]

Hello Guys,

We have a project that migrates SNS ISE (physical appliance), and I would like to know if there is any possibility of migrating the users that were created by the sponsors?

We did not consider this step, and I am thinking that after activating this new ISE, all my Guest users will be unavailable and without access to the network. Am I correct or is there any way to migrate user information? If it is without access, I will have to think of something to avoid the impact on visiting users.

Regards

[Greg Gibbs]

No, there is no method to export the Guest database with the account passwords and sponsor linkages and import that into another ISE cluster.

The only way to retain the Guest database with a migration is using the Configuration Backup/Restore method.

[Jalmeida]

Hello @Greg Gibbs 

I understand, but in this case, I see it as impossible, as I am migrating an SN3515 version 2.4, patch 9 to an SNS3755 version 3.2 patch 5. In other words, the backup wouldn't work, right?

Thank you very much!

[Greg Gibbs · Accepted solution]

You definitely could not do a direct backup/restore from 2.4 to 3.2. One option would be spin up a VM running 3.0, restore the 2.4 config to that, then backup the config from 3.0 and restore it to your 3.2 instance.

See the ISE Upgrade Matrix for more info.

[Jalmeida]

@Greg Gibbs  I understood! Thank you very Much!

[ffischer]

For me, this answer would imply that

During an upgrade using the Backup and Restore method,
all existing guest accounts including their passwords are preserved ?

Can somebody definately confirm this ?

Is there a really good reason why
BRKSEC-2889
states on Page 35: Purge operational data, inactive endpoints and guest accounts ?