topic Cisco ISE Policies compare policy from 2.4 to 3.3 in Network Access Control

Cisco ISE Policies compare policy from 2.4 to 3.3

MonkeyBear007 — Tue, 11 Feb 2025 15:22:50 GMT

Need to compare Cisco ISE Policies between ISE 2.4 and ISE 3.3

someone did upgrade the ISE 2.4 to 3.3 using VM and I need the compare the old and new policy.
I was wondering best way to compare Policy SET/Elements between ISE 2.4 and ISE 3.3

too much of verison change to do line by line check

Re: Cisco ISE Policies compare policy from 2.4 to 3.3

Scott Fella — Tue, 11 Feb 2025 15:43:50 GMT

If you don't want to visibly look on the GUI, which I think is a great idea and something you should do to get familiar, you can always export the policy on both nodes and then use a diff tool to see what has changed.

Re: Cisco ISE Policies compare policy from 2.4 to 3.3

MonkeyBear007 — Tue, 11 Feb 2025 16:54:52 GMT

my problem ISE 2.4 and ISE 3.3 is big update of the way XML is compared and makes compare the two XML different.
GUI i just compared what is active hit and not what is not being used

Re: Cisco ISE Policies compare policy from 2.4 to 3.3

Scott Fella — Tue, 11 Feb 2025 17:10:45 GMT

That is exactly what I have done, even when I test with different versions of ISE. I also clear the hit counters and let that run for a few day's or weeks so that I know what is getting hits and what not.