cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
426
Views
0
Helpful
4
Replies

Upgrade Path from ISE 1.3 : Go to 1.4 or Straight to 2.0?

I am currently running ISE 1.3 in a distribute deployment (2 x PAN/MNT Virtual appliances + 2 x PSN 3495 appliances). 

I was intent on upgrading to release 1.4.....

However, I was looking at all of the cool new fatures in 2.0 (some of which seem beneficial). I also noticed that the first round of patches is out for 2.0, which makes me feel a little better about it. 

Are there any show stoppers that I should be nervous about?

Thanks,

Phill

4 Replies 4

Marvin Rhoads
Hall of Fame
Hall of Fame

If I had a production 1.3 and was upgrading today, I'd go with the latest 1.4 patch unless there was something compelling for my particualr environment in 2.0.

The 2.0 patch that's out is very limited in what it fixes. Reference: http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/release_notes/ise20_rn.html#pgfId-611708

I've seen a few 2.0 bugs that might worry me in a non-greenfield production environment. (i.e not pushing a redirect dACL proeprly)

Once 2.1 or the next patch releease comes out, I might reconsider.

A greenfield 2.0 deployment would be more of a thumbs up, subject to pilot deploymnet to test the needed features.

Just my opinion....

tomyip
Level 1
Level 1

Starting with ISE 2.0, TACACS support is introduced. If you have a need for TACACS support, then I would recommend upgrading to 2.0. Also if it's difficult to get maintenance/change windows to upgrade, then I would upgrade to 2.0.

2.0 Patch 2 resolved the issue I had mentioned previously.

We've done a couple of 2.0 deployments now without any major issues so far. I spoke with the Cisco internal folks and they concur it's ready for production deployments.

Thanks for your response. 2.0 sounds like it is definitely worth looking into. 

Phill

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: