topic Yes a big leap, all of a in Network Security

Cisco ISE Upgrade

Mokhalil82 — Fri, 21 Feb 2020 13:30:33 GMT

I have cisco ISE 1.0 which I want to upgrade to ISE 1.3. According to the upgrade path I would need to follow this process

1.0 > 1.1 (apply latest patch) > 1.2 > 1.3

The 1.0 to 1.1 bundle is deferred. So I am thinking of installing a new ISE 1.3 as a virtual appliance and then configuring it from there. I have not too clued up on ISE so I am wondering is there a way of backing up on ISE 1.0 and restoring to 1.3?

If not what would be the best approach?

Thanks

You cannot restore a backup

Marvin Rhoads — Tue, 16 Jun 2015 21:11:02 GMT

You cannot restore a backup from 1.0 onto a later version of ISE.

If you open a TAC case, they should be able to provide you with special file access to the 1.0-1.1 upgrade bundle once you explain your case for needing it.

While you're at it, you should move all the way to 1.4 - no good reason to stop at last year's 1.3. 🙂

Thanks Marvin, btw is there

Mokhalil82 — Tue, 16 Jun 2015 22:05:25 GMT

Thanks Marvin, btw is there any issues to be aware of or any config changes required during this upgrade process from 1.0 to 1.4

Wow 1.0 to 1.4 is a big leap

Marvin Rhoads — Wed, 17 Jun 2015 03:25:11 GMT

Wow 1.0 to 1.4 is a big leap in functionality. Are you running this in your production network?

The authentication and authorization should continue to work as you have configured them.

Off the top of my head

- you will have to rejoin to the AD domain (if you joined in the first place). Make sure you have the service account credentials to do so.

- guest and other portals have been completely redesigned. If you've done any customization, you're most likely best off scrapping it and rebuilding using the new portal builder tools.

- depending whether you have Base or Advanced 1.0 licenses you will carry through into Base or Apex with 1.3 / 1.4.

- ISE has a ton of other new functionality that may or may not be applicable in your environment.

Yes a big leap, all of a

Mokhalil82 — Wed, 17 Jun 2015 09:22:39 GMT

Yes a big leap, all of a sudden we want to upgrade and we want too upgrade to the latest version :-). It is on a production network on a VM. I think it may be better just installing the new ISE and configuring that. Currently it is only used for the wireless devices.

Thanks

If you don't have a lot of

Marvin Rhoads — Wed, 17 Jun 2015 12:54:35 GMT

If you don't have a lot of policies or customization then I'd agree a fresh install would seem to make sense.

The multiple upgrades will take you hours and hours - especially if the deployment is multiple nodes.