User Guide for Cisco Secure ACS to Cisco ISE Migration Tool, Release 2.2.0.1

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

User Guide for Cisco Secure ACS to Cisco ISE Migration Tool, Release 2.2.0.1

Chapter Title

Reports

Results

Updated:
August 8, 2017

Chapter: Reports

Reports

The migration tool generates reports for export, import, and policy gap analysis during data migration.

If you decide to share the report files with anyone, or want to save them to another location, you can find the following files in the Reports folder of the migration tool directory:

  • import_report.txt

  • export_report.txt

  • policy_gap_report.txt

Export Report

This report indicates specific information or errors that are encountered during the export of data from the Cisco Secure ACS database. It contains a data analysis section at the end of the report, which describes the functional gap between Cisco Secure ACS and Cisco ISE. The export report also includes error information for exported objects that will not be imported.

Table 1 Cisco Secure ACS to Cisco ISE Migration Tool Export Report

Report Type

Message Type

Message Description

Export

Success

Lists the names of the data objects that were exported successfully.

Information

Lists the data objects that are not exported as they are predefined in Cisco ISE.

Warning

Lists the data objects that were exported but might require some additional configuration in Cisco ISE after migration.

Lists the data objects for which the naming conversion is done by the migration tool.

Error

Lists the data objects that are not exported due to limitation in the configured name or attribute type that is not supported in Cisco ISE.

Lists the data objects that are not exported as they are not supported in Cisco ISE.

Policy Gap Analysis Report

This reports lists specific information related to the policy gap between Cisco Secure ACS and Cisco ISE, and is available after completion of the export process by clicking the Policy Gap Analysis Report button in the migration tool user interface.

During the export phase, the migration tool identifies the gaps in the authentication and authorization policies. If any policy is not migrated, it is listed in the Policy Gap Analysis report. The report lists all the incompatible rules and conditions that are related to policies. It describes data that cannot be migrated and the reason with a manual workaround.

Some conditions can be automatically migrated by using the appropriate Cisco ISE terminology, for example, a condition named Device Type In is migrated as Device Type Equals. If a condition is supported or can be automatically translated, it does not appear in the report. If a condition is found as “Not Supported” or “Partially supported,” the policy is not imported and the conditions appear in the report. It is the responsibility of the administrator who is performing the migration to modify or delete such conditions. If they are not modified or deleted, policies are not migrated to Cisco ISE.

Note

After exporting the data, you should analyze the export report and the policy gap report, fix the listed errors in the ACS configuration and address the warnings and other issues. After addressing the errors or warnings, perform the export process again. For information on exporting data from Cisco Secure ACS, see Export Data from Cisco Secure ACS.

Import Report

This report indicates specific information or errors that are encountered during the import of data into the Cisco ISE appliance.

Table 2 Cisco Secure ACS to Cisco ISE Migration Tool Import Report

Report Type

Message Type

Message Description

Import

Information

Lists the names of the data objects that were imported successfully.

Warning

Lists the data objects that were imported but might require some additional configuration in Cisco ISE after migration.

Lists the data object which already exists in Cisco ISE if migration is performed on existing Cisco ISE installation.

Error

Data objects are not imported due to the following reason:

  • Got some unexpected errors while importing the data objects to Cisco ISE

Was this Document Helpful?

FeedbackFeedback

Contact Cisco