cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
993
Views
0
Helpful
3
Replies

ISE 2.7 upgrade to version 3 patch 4

Gouthami Nair
Level 1
Level 1

Hi All,

We are currently using Cisco ISE 2.7 version patch 8 and planning to upgrade to version 3.1 Please let me know whether any known issues reported in patch 4 ? Are there any reported issues during the upgrade such as configuration sync etc..

3 Replies 3

Hi @Gouthami Nair ,

 I didn't have issues from 2.7 P8 (Nov 21th) to 3.1 P4 (Sep 22nd).

Note: attention to the following

Hope this helps !!!

Arne Bier
VIP
VIP

My own personal experience with 3.1p5 was that Cisco Phones whose EAP-TLS certificate was signed by Call Manager (CAPF cert) would fail - ISE was complaining about failed SSL decoding. We had to revert back to patch4 and then the phones started working again. 

We have not tried patch 6 

Damien Miller
VIP Alumni
VIP Alumni

I would recommend two things for you.

  1. Install 2.7 patch 9 prior to upgrading, this will limit the amount of change you experience going to 3.1 since many of the fixes in 2.7p9 are also built in to the 3.1 patches. 
  2. Target 3.1 patch 6 as your post upgrade release. Patch 6 includes an additional 87 publicly acknowledged bug fixes and a few that are quite severe in p5 hit. It also provides for the workaround with TPM stored certs on windows machines.