ISE patching partially for testing

[REJR77]

Hello

Is it possible to patch only some nodes in the deployment for evaluating patch behaviour?

Let's say I have 6 nodes,is it possible to patch only 1 pan and 2 PSN, and when all is fine, continue the patching 2 or 3 days later?

Is it possible from gui and /or cli?

Regards

[Rob Ingram · Accepted solution]

@REJR77 you can if you install the patch from the CLI only, reference Cisco live BRKSEC-2889 presentation.

Although, personally I'd test patches in an isolated dev environment, rather than on a few nodes in production.

[Singhaam]

@REJR77 Yes you can from cli. Patch the node from cli and reboot. Then manually update the other nodes when you tested successfully and ready.

patch install <patch_file_name> <repository_name>