ISE Upgrade fro 1.2 to 2.0

[Bilal Al-Masri]

I am planning to upgrade ISE from 1.2 to 2.0. Shall I need my current ISE version (1.2) in ordering new ISE license (2.0)?

Also, What is the difference in between ISE 2.0 , 2.1 and 2.2? Which criteria will limit me to go for 2.1 or 2.2?

Thanks

[Gagandeep Singh]

Hi  Bilal,

First of all upgrade to 2.0 can only be done from ISE 1.3 or 1.4.

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/upgrade_guide/b_ise_upgrade_guide_20/Before_You___Begin.html

Note : As licensing got changed from ISE 1.3 onwards. If you upgrade ISE 1.2 TO 1.3, license also gets upgrade. If you restore backup of ISE 1.2 on 1.3 then license wouldn't take affect.

From 2.0:

Introduced TACACS on ISE.

FROM 2.1

Smart licensing with may other new features concept came in

FROM 2.2:

Enforcement on smart licensing. Wireless set up option.

Would request to follow release notes for each version.

Regards

Gagan

PS: rate as correct if it helps!!!

[Ronaldo da Silva]

To clarify, can I upgrade from 1.2.1 to 1.3 and then 2.x without costs?

Read more about the environment:

Model: 8 SNS-3495-K9
Software: 1.2.1 Patch 8
License: Base - Advanced / Plus
AnyConnect NAM and NAC Agent (in the whole environment)

Tks;

Ronaldo

[Marvin Rhoads]

As long as you have a current support contract for your appliances, you are entitled to all ISE software upgrades and patches.

[Ronaldo da Silva]

During upgrades are the licenses automatically converted? Will not I need to update used clients (AnyConnect NAM and NAC Agent)?

[Marvin Rhoads]

Your old license files continue to be valid.

Old base licenses (non-expiring) remain as-is. Old Advanced license term licenses are considered Apex licenses under the upgraded deployment.

You can and should run the latest AnyConnect and NAC Agent client software.  If can be deployed as part of your client provisioning or apart from ISE as part of your enterprise software distribution scheme.

[Marvin Rhoads]

If you have the old SNS-3315 hardware you cannot upgrade all of the way. If you have VM-based ISE nodes then it's ok.