topic Re: ISE Upgrade Issue in Network Access Control

ISE Upgrade Issue

martin-d — Fri, 16 May 2025 14:00:28 GMT

We've got an SNS-3615-K9 running ISE software version 3.1.0 which we attempted upgrading to a newer patch file ( 3.1.0.518-Patch7 > Patch10 ) but after this, the GUI will no longer run, and looking at the Application Server status it is 'Not Running'. It will not come up even after waiting for some time (2 hours). Reloading the device has failed to bring this back up. It still says 'Not Running'. So now when I look at the output of 'show version' patch 7 and patch 10 are both listed.

What is the best way to resolve this to get the GUI working again?

Re: ISE Upgrade Issue

Scott Fella — Fri, 16 May 2025 15:14:52 GMT

Have you tried to rollback the patch from the CLI to see if you can get your appliance up and running: patch remove ise 10

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215406-patch-installation-on-ise-and-faq-durin.html#toc-hId--438083581

Re: ISE Upgrade Issue

Marcelo Morais — Sat, 17 May 2025 01:15:35 GMT

Hi @martin-d ,

the show version command list the Version of the System and Patch installation information:

ise/admin# show version 
Cisco Application Deployment Engine OS Release: 3.3
ADE-OS Build Version: 3.3.P.097
ADE-OS System Architecture: x86_64

Copyright (c) 2005-2023 by Cisco Systems, Inc.
All rights reserved.
Hostname: ise

Version information of installed applications
---------------------------------------------

Cisco Identity Services Engine
---------------------------------------------
Version : 3.3.0.430
Build Date : Mon Jul 3 21:31:18 2023
Install Date : Wed Sep 4 18:56:36 2024

Cisco Identity Services Engine Patch 
---------------------------------------------
Version : 2
Install Date : Wed Sep 04 19:26:12 2024

Cisco Identity Services Engine Patch 
---------------------------------------------
Version : 3
Install Date : Thu Nov 07 10:41:57 2024

Cisco Identity Services Engine Patch 
---------------------------------------------
Version : 4
Install Date : Thu Dec 12 13:07:08 2024

Cisco Identity Services Engine Patch 
---------------------------------------------
Version : 5
Install Date : Thu May 08 11:39:22 2025

The patch remove command is used to rollback the last Patch installed (as @Scott Fella already said):

ise/admin# patch remove ise ?
Possible completions:
<WORD> Patch version number to be removed (Max Size - 255)

You can also try the application stop/start command:

ise/admin# application stop ise
ise/admin# application start ise

Note: pay special attention to: ISE - EoS & EoL Announcement ISE 3.1 - 3.2.

Hope this helps !!!

Re: ISE Upgrade Issue

ahollifield — Mon, 19 May 2025 12:53:06 GMT

Open a TAC case.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/secure-network-server-3615-3655-3695-eol.html