topic Re: Cisco ISE Upgrade from 2.1 to 2.2 Issues in Network Access Control

Cisco ISE Upgrade from 2.1 to 2.2 Issues

Jay233 — Fri, 21 Feb 2020 18:33:41 GMT

All,

Recently upgraded ISE 2.1 (8 node deployment) over to 2.2.

All seamed fine regarding the upgrade (completed from the CLI) but Several issues have been encounted.

AnyConnect Posture has stopped woking for all clients (Gets to 10 % then says can not find/contact policy server).
The Admin node GUI is showing inconsistant web pages, missing/not displaying features etc.

Has anyone got any ideas on the above, should I go streight over to 2.3?

Thanks,

Jay.

Re: Cisco ISE Upgrade from 2.1 to 2.2 Issues

Marvin Rhoads — Thu, 07 Sep 2017 12:48:58 GMT

Generally speaking I am recommending 2.3. I've done 2 deployments of it without issue and heard good things from other engineers as well.

However with a production 2.2 deployment having issues I'd also recommend opening a TAC case on your issues for due diligence. I assume you rolled out 2.2 Patch 3 (the latest patch as of this posting).

Re: Cisco ISE Upgrade from 2.1 to 2.2 Issues

Jay233 — Thu, 07 Sep 2017 16:00:36 GMT

Hi Marvin,

Many thanks for your response, our deployment is currently running 2.2 patch 2.

Do you see any issues going straight to Ver 2.3 or should I patch to 3 before.

Re: Cisco ISE Upgrade from 2.1 to 2.2 Issues

Marvin Rhoads — Thu, 07 Sep 2017 16:21:10 GMT

Nothing in Patch 3 would be needed prior to moving on to ISE 2.3. It was pretty minor as patches go. (Patch 4 is long overdue and should be out soon.)

Re: Cisco ISE Upgrade from 2.1 to 2.2 Issues

Jay233 — Thu, 07 Sep 2017 16:24:54 GMT

Hi Marvin,

Appreciate your support, thank you.