Need suggestion Cisco ISE Appliance SNS-3495-K9 to SNS-3695- K9

[anilcisconw]

Hi All,

Could you please recommend the best way to upgrade Cisco ISE appliance from SNS-3495-K9 to SNS-3695- K9

Currently hardware is running on 2.2 as SNS-3495-K9  is not supported further version.

New Hardware SNS-3695- K9 will install 3.0 and after prepare all the configuration planning to move all traffic from old to new node.

But how the current guest user database will be moved..Please suggest.

Thanks in advance!!

[balaji.bandi]

Personally there are lot of changes from ISE 2.2 to ISE 3.0

On the new Appliance go wth lowest version of ISE and restore from OLD ISE 2.2, on the new ISE, start upgrading inline 2.7

https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/upgrade_guide/Upgrade_Journey/HTML/b_upgrade_method_2_7.html#id_125062

Once this is done, take backup is ISE 2.7 and either upgrae ISE 3.0 or install Fresh ISE 3.0 with patch and restore ISE 27 backup.

read all the release notes, ready for break fix any issue, with TAC in line.

[anilcisconw]

Thanks for the help @balaji.bandi , but current hardware SNS-3495-K9 do not support 2.7

[thomas · Accepted solution]

Probably best to use the backup and restore method since you have physical appliances that do not overlap in ISE releases and you cannot sync between old and new appliances.

You will need to perform an interim restore from your ISE 2.2 to a ISE 2.6 or 2.7 in a virtual machine to do the initial database configuration upgrade. Then do another backup and restore of the 2.6/2.7 config from the VM to your ISE 3.0 appliance. You may install ISE for free on a VM for up to 90-days to accomplish this.

Keep in mind you will also need to update your ISE Licenses to Smart Licensing. Watch ISE Smart Licensing Webinar for details.

Depending on how simple or complex your policies are and if all of this seems like too much work, your other option would be to export your data using CSVs, import on ISE 3.0, then manually recreate policies and other settings.