NCM can get configs via SSH, TFTP or SCP. Cisco ISE's SSH interface is mainly to set up the IP and such, so very little of the config is available via this method.
You can set up a repository in the CLI side of the ISE server, which I think can be an SCP or TFTP server, so that might be a possible way, just using the SCP or TFTP server on SW? But, I don't think there is a way to trigger an immediate download of some sort of archive via the CLI in ISE? If you know differently, let me know and I'll try and figure out another way?
