topic Re: Cisco ISE 3.2 patch 7 installation steps in Network Access Control

Cisco ISE 3.2 patch 7 installation steps

atifali.zaidi1 — Fri, 24 Jan 2025 15:28:45 GMT

i have the following Cisco ISE deployment . i will need to deploy patch 7 on the whole cluster and i will need to do it using the CLI option , what should be the order ? i will take backups for each node before applying the patch.

DC1

PAN (secondary)

PSN 1 for internal auth

PSN2 for Guest

DC2

PAN (Primary)

PSN 1 for internal auth

PSN2 for Guest

Re: Cisco ISE 3.2 patch 7 installation steps

PSM — Fri, 24 Jan 2025 16:30:30 GMT

You need to do it on Primary PAN first. After that you can choose your sequence no problem in that.

Re: Cisco ISE 3.2 patch 7 installation steps

PSM — Fri, 24 Jan 2025 16:34:37 GMT

As you mentioned above after completing Primary PAN, I would choose DC2 PSN1( Hope you have configured DC1 PSN1 as backup in NAD devices). Then DC2 PSN2, DC1 PAN, DC1 PSN1 and DC1 PSN2.

Re: Cisco ISE 3.2 patch 7 installation steps

Ambuj M — Fri, 24 Jan 2025 17:47:59 GMT

As recommended you can start with Primary PAN, additionally I would recommend to copy the patch file into ISE local repository (DISK) before starting install and verify the hash, follow this document