Things to Consider while I upgrade ISE from 2.7 to 3.1

[MSJ1]

Hello,

I have a 2 node ISE deployment. Need to upgrade from ISE 2.7 to 3.1.  Is it a direct path from 2.7 to 3.1 ?

I also use posture for VPN through ISE , is there any change POSTURE functionality perspective when upgrading to 3.1  ?

[ahollifield · Accepted solution]

yes direct: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/upgrade_guide/HTML/b_upgrade_method_3_1.html#id_15402

No significant changes I am aware of other than licensing.  It is also usually recommended to do a Cisco Secure Client (AnyConnect) and compliance module upgrade in conjunction with an ISE upgrade.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/release_notes/b_ise_31_RN.html 

[thomas]

Are you aware of the ISE Webinars? https://cs.co/ise-webinars

They are archived on the ISE YouTube Channel: https://cs.co/ise-youtube

▶ Upgrading your Cisco ISE Deployment
03:40 Supported Releases for Upgrading to ISE 3.1
06:02 Upgrade Workflow
07:04 Upgrade Methods: Backup & Restore, GUI, or CLI
11:00 Upgrade Preparations: Backup, Certs, Health Check
14:32 Upgrade Options Overview: Split and Full Upgrades
17:40 Full Upgrade Process Details
21:28 Upgrade Pre-Checks
27:09 Demo of Full Upgrade from ISE 2.7 to 3.1
38:45 Split Upgrade Process Details
44:11 Demo of Split Upgrade from ISE 2.6 to 3.1
52:38 Split vs Full Upgrade Process Comparison
54:38 Post Upgrade Tasks
56:13 ISE Upgrade Resources

[ammahend]

Some good suggestions already given below, just keep in mind that once upgraded, your base license won’t be perpetual and will change to term based expiring end of October 2023, so keep that reoccurring cost in mind.