02-11-2025 07:22 AM
Need to compare Cisco ISE Policies between ISE 2.4 and ISE 3.3
someone did upgrade the ISE 2.4 to 3.3 using VM and I need the compare the old and new policy.
I was wondering best way to compare Policy SET/Elements between ISE 2.4 and ISE 3.3
too much of verison change to do line by line check
02-11-2025 07:43 AM
If you don't want to visibly look on the GUI, which I think is a great idea and something you should do to get familiar, you can always export the policy on both nodes and then use a diff tool to see what has changed.
02-11-2025 08:32 AM - edited 02-11-2025 08:54 AM
my problem ISE 2.4 and ISE 3.3 is big update of the way XML is compared and makes compare the two XML different.
GUI i just compared what is active hit and not what is not being used
02-11-2025 09:10 AM
That is exactly what I have done, even when I test with different versions of ISE. I also clear the hit counters and let that run for a few day's or weeks so that I know what is getting hits and what not.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide