topic Re: Is Cisco ISE 3.2 patch-3 broken? in Network Access Control

Is Cisco ISE 3.2 patch-3 broken?

adamscottmaster2013 — Wed, 02 Aug 2023 13:26:16 GMT

4 nodes cluster:

ise1: primary admin, primary mnt
ise2: secondary admin, secondary mnt
ise3: psn
ise4: psn

1- log into ise1 via https,
2- go to Administration -> System -> Maintenance
3- upload patch-3,
4- click on "install"

Well, only ise1 got patched to patch-3. ise2 got stuck in "initialization mode" but it was never rebooted.
When I run "show application status ise" on ise2, it shows everything is running in patch-2. ise3 and ise4
are not being patched.

Am I missing something? Does Cisco mess up again by not QA'ing patch-3?

Re: Is Cisco ISE 3.2 patch-3 broken?

Charlie Moreton — Wed, 02 Aug 2023 15:43:35 GMT

SNS Appliances or virtual environment?

Which virtual environment?

Is VMware at the right VM hardware level?

Is Hyper-V gen 1 or gen 2 VMs?

Re: Is Cisco ISE 3.2 patch-3 broken?

adamscottmaster2013 — Thu, 03 Aug 2023 18:12:30 GMT

@Charlie Moreton:

- VM environment, ESXi 7 with hardware certified to run ESXi

- VM is at the right level and hardware level,

- Correct CPU and memory level,

Re: Is Cisco ISE 3.2 patch-3 broken?

Charlie Moreton — Thu, 03 Aug 2023 18:44:46 GMT

Is the ISE API Gateway Service running?

Re: Is Cisco ISE 3.2 patch-3 broken?

adamscottmaster2013 — Thu, 03 Aug 2023 19:36:08 GMT

@Charlie Moreton

Primary Admin/MNT:

ISE API Gateway Database Service running 14403
ISE API Gateway Service running 20747

Secondary Admin/MNT:

ISE API Gateway Database Service running 1869516
ISE API Gateway Service running 1701974

Re: Is Cisco ISE 3.2 patch-3 broken?

Charlie Moreton — Thu, 03 Aug 2023 19:52:57 GMT

Interesting. I'd suggest that you call TAC

Re: Is Cisco ISE 3.2 patch-3 broken?

adamscottmaster2013 — Thu, 17 Aug 2023 15:32:49 GMT

TAC doesn't know either. It is now going to BU.