topic Re: Cisco ISE health check in Network Access Control

Cisco ISE health check

msandhu — Wed, 14 Dec 2022 19:16:29 GMT

We need to upgrade our Cisco ISE from 2.4 to 3.0. In order to proceed we performed the Health check. We are using two nodes as a PAN. We are unable to complete the HealthCheck and getting health check execution has timed out message from ISE.

Any suggestions on this much appreciated.

Thank you

Re: Cisco ISE health check

ahollifield — Wed, 14 Dec 2022 20:30:39 GMT

2.4 patch? Also why not upgrade to 3.1?

Re: Cisco ISE health check

msandhu — Thu, 15 Dec 2022 18:55:23 GMT

We are on the latest Patch14, 2.4.

Our server doesn't support 3.1.

Re: Cisco ISE health check

Rodrigo Diaz — Thu, 15 Dec 2022 21:06:05 GMT

@msandhu

As per your last post I would say that you are using one appliance , is that's correct please share the version of SNS you're using

Re: Cisco ISE health check

Marcelo Morais — Thu, 15 Dec 2022 23:37:03 GMT

Hi @msandhu ,

please install the URT Bundle (ise-urtbundle-3.0.0.458-1.0.0.SPA.x86_64.tar.gz) to check the following:

1. Pre-requisite checks
2. Clone config database
3. Copy upgrade files
4. Data upgrade on cloned database
5. Time estimate for upgrade

Hope this helps !!!

Re: Cisco ISE health check

iVicMMac — Sun, 12 Mar 2023 14:11:19 GMT

Did you solve this?

Re: Cisco ISE health check

iVicMMac — Sun, 12 Mar 2023 14:20:19 GMT

I have the same problem, Im on version 2.4 and patch 14, I try to upgrade to 2.7, I ran the URT tool but only estimated time failed, on the TAC ticket I raised told me I can proceed with the upgrade because this are only 'cosmetic error' Can I proceed withouth run the healt cheks?

Appliance

SNS-3515-K9 chassis

Re: Cisco ISE health check

Marcelo Morais — Sun, 12 Mar 2023 22:51:43 GMT

Hi @iVicMMac ,

1st please take a look at: CSCvy99582 When upgrading from ISE 2.4 patch 13 to 2.7 if external raidus server configure upgrade will fail.

2nd if all the Data Upgrade Steps of URT succeeded, then it's good news ... you probably received the following, am I right?

Running data upgrade for node specific data on cloned database
- Successful

Hope this helps !!!

Re: Cisco ISE health check

ajc — Mon, 13 Mar 2023 01:59:38 GMT

I guess the BUG ARTICLE refers to remove all the connections to Active Directory

Re: Cisco ISE health check

iVicMMac — Mon, 13 Mar 2023 15:03:21 GMT

Thanks, but I don't have registered AD devices, anyway, yesterday I completed the upgrade with no issues, even with the time outs on the healtchecks.

Re: Cisco ISE health check

iVicMMac — Mon, 13 Mar 2023 15:09:25 GMT

Yes, I ran the URT and the only error was on the estimated time to complete the upgrade, then only doubt I had was the time outs when I tried to run the healtchecks prior the upgrade, but I decided to run the upgrade and it was successful, thank you for your response!

Re: Cisco ISE health check

Marcelo Morais — Tue, 14 Mar 2023 05:01:24 GMT

Hi @iVicMMac ,

excellent news !!!