topic ISE Deployment Upgrade in Network Access Control

ISE Deployment Upgrade

benolyndav — Sun, 03 Mar 2024 11:17:16 GMT

Hi
I'm planning an ISE Deployment upgrade and havent got very far beofre im unsure about something, In the upgrade guide is the below text we are running ISE 3.0.458 and am wondering if the below applies to us and if so how do I chek our version .??

(From Cisco IdentityServices Engine (Cisco ISE) Release 3.1, all pxGrid connections must be based on pxGrid
2.0. pxGrid 1.0-based (XMPP-based) integrations will cease to work on Cisco ISE from Release 3.1 onwards.
pxGrid Version 2.0, which is based on WebSockets, was introduced in Cisco ISE Release 2.4. We recommend
that you plan and upgrade your other systems to pxGrid 2.0-compliant versions in order to prevent potential
disruptions, if any, to integrations.)

Thanks

Re: ISE Deployment Upgrade

Rob Ingram — Sun, 03 Mar 2024 11:31:45 GMT

@benolyndav what external systems is ISE integrated with using pxGrid? FMC/FTD, Stealthwatch etc. If they do not support pxGrid 2.0 (only 1.0) then if you upgrade they will cease to work from ISE 3.1.

Re: ISE Deployment Upgrade

benolyndav — Sun, 03 Mar 2024 11:34:45 GMT

Hi @Rob Ingram
Our ISE is intergrated with Stealthwatch and DNAC, So I need to check these and also how to configure them for pxgrid 2.0 after the upgrade.?

Thanks

Re: ISE Deployment Upgrade

Rob Ingram — Sun, 03 Mar 2024 11:56:02 GMT

@benolyndav check the version release/docs notes of DNAC and Stealthwatch you are currently using to confirm they support pxGrid 2.0 - you must do this before upgrading, otherwise the inegration won't work if the other systems only support pxGrid 1.0. If they are running pxGrid 1.0, then you will need to upgrade those systems before upgrading ISE.

Tbh if you are running a relatively recent version then the chances are the software supports pxGrid 2.0.

Why run ISE 3.1? as ISE 3.2 is the recommended release.