Patching ISE 3.3 patch-6 to patch-7 via CLI

adamscottmaster2013 — Mon, 28 Jul 2025 18:22:43 GMT

I have a ISE 3.3 patch-6 cluster with:

node1: Primary PAN/Secondary MnT,

node2: Secondary SAN/Primary MnT,

node3, node4, node5: PSN

I want to patch these nodes via CLI, and I can't remember how I did it last time, but something along this line:

1- patch upgrade node2 to patch-7,

2- patch node3, node4, and node5 to patch-7,

3- patch node1 to patch-7,

Is that the correct sequence of patching the ISE cluster?

Re: Patching ISE 3.3 patch-6 to patch-7 via CLI

ahollifield — Mon, 28 Jul 2025 19:29:06 GMT

You must start with the PAN. The order after that doesn't matter. In your case I would do:

node1

node3, node4, node 5

node 2