topic Re: ISE upgrade in Network Access Control

ISE upgrade

stephenstown20 — Thu, 23 May 2024 21:50:42 GMT

hello

we have an ISE v2.7 running on a virtual environment

when running the health check pre upgrade we get an error message on the platform

attached file shows the error/warning

Q has anyone seen this before ?

I checked the ade logs but did not find any information

Re: ISE upgrade

Chris Terry — Thu, 23 May 2024 22:30:13 GMT

What nodes do you have in your deployment? That error almost sounds like you have hybrid deployment of VMs and physical appliances. The physical appliances SNS 3415 and 3495 do not support ISE version past 2.3.

Re: ISE upgrade

balaji.bandi — Fri, 24 May 2024 06:23:04 GMT

we have an ISE v2.7 running on a virtual environment

what version you trying to upgrade this Virtual ISE ?

check the upgrade guide :

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/upgrade_guide/HTML/b_upgrade_method_3_1.html

If you upgrading to 3.X or above i suggest to install fresh ISE is good option.

Re: ISE upgrade

Chris Terry — Fri, 24 May 2024 20:24:19 GMT

I agree with balaji.bandi.

I used new VMs when I upgraded from 2.7 to 3.2 . That allowed me to set up everything and make sure it was working before the cutover to the new VMs. My deployment has the PSNs behind an F5 load balancer which allowed for an easy cutover consisting of just changing the node members of the various pools we had set up.

Re: ISE upgrade

Marvin Rhoads — Mon, 27 May 2024 04:06:56 GMT

In addition to the good advice already shared here, please share a redacted "show inventory" cli output for the VM in question.