topic ISE 2.6 Patch 11 to 2.7 Upgrade Issue in Network Access Control

ISE 2.6 Patch 11 to 2.7 Upgrade Issue

michael.armour.ctr1 — Thu, 11 Aug 2022 19:57:14 GMT

Trying to upgrade from ISE 2.6 patch 11 to ISE 2.7 and upgrade will not get past the upgrade pre-check. All the checks timeout. Even when I try to run the health checks, those timeout as well. I am trying to run the upgrade from the GUI. Trying to upgrade because ACAS states that our ISE devices are vulnerable for Log4j. We have installed the log4j hotpatch.

Re: ISE 2.6 Patch 11 to 2.7 Upgrade Issue

Arne Bier — Thu, 11 Aug 2022 23:28:24 GMT

You have installed the URT on the Standby Admin node, correct? Are the application processes running normally? URT should not time out. If that is the case then perhaps reboot the Standby Admin Node and install the URT again after processes are all running again. If that also doesn't work then open a TAC case. Sounds dodgy.

Re: ISE 2.6 Patch 11 to 2.7 Upgrade Issue

thomas — Fri, 12 Aug 2022 12:56:41 GMT

Call TAC.

Re: ISE 2.6 Patch 11 to 2.7 Upgrade Issue

Marcelo Morais — Sat, 13 Aug 2022 04:01:08 GMT

Hi @michael.armour.ctr1 ,

beyond what @Arne Bier and @thomas said, remember that ISE 2.7 supports restore from backups obtained from Release 2.2 and later., in other words, please try to install ISE from scratch in a new VM (ISE 2.7 P7) and restore the backup obtained from ISE 2.6 P11.

Hope this helps !!!