Upgrading to 2.4

[Ping Zhou]

Can SNS-3495-K9 or its VM equivalent support version 2.4?  I can't find it in the release notes.

The release note for 2.4 is attached for quick ref. Thanks.

[Craig Hyps · Accepted solution]

No.  The 34x5 series hardware appliances are no longer supported in ISE 2.4.    However...

The VM equivalent of the 3495 does exceed the specs of a 3515 when hyper-threading is enabled, so a previous 3495 VM would be detected as a 3515.  If increase memory to 64GB, then it should meet 3595 specs.  The 3415 VM would need two extra physical cores, for a total of 12 hyper-threaded cores to be detected as a 3515.

Since based on a UCS series server, the 3495 Hardware appliance could have ESXi installed and then used as a 3515 Virtual appliance.  The 3415 would fall below required specs even with HT enabled and would be detected as EVAL with ESXi loaded.  It could still serve as a lab/test system.

I would defer to ISE product management team as to whether a new VM license would be required, or if any allowance granted on a migration of appliance to different platform.

[Ping Zhou]

Thanks, if I have to stay with my 10x SNS-3495 nodes without going with VM.. I'm currently running Sponsored Guest, Wired+Wireless Dot1x (EAP-TLS), Profiling and Posture Assessment with "AnyConnect + Compliance Modules". Between 2.2p7 and 2.3p3, which one is better? I went through the "ISE upgrade - Best Practice" by Mr Thiruvengadam, I still have this question. Thanks for any input,

[Jason Kunst]

Right now recommendation is 2.2 with latest patch unless you need something in 2.3

[hslai]

Adding to Craig's...

The release notes have the info under Licensing Changes

...

If you are planning to upgrade to Release 2.4, contact ise-vm-license@cisco.com for sales orders that include VM purchase to procure one medium VM license for each VM previously purchased.

The following table shows how the VM resources are categorized:

VM Category	RAM Range	Number of CPU Cores
Small	0 to 16 GB	up to 6 cores
Medium	greater than 16 GB to 64GB	7 or 8 cores
Large	greater than 64GB	greater than 8 cores

[tolarosa@cisco.com]

So does every customer that purchased a standard VM-K9 prior to 2.4 need to contact the ise-vm-license email prior to upgrading to 2.4?

[Jason Kunst]

No they can upgrade but will be annoyed by a vm license alarm

[Craig Hyps]

Correct.  Enforcement is planned, but for 2.4 you will receive warnings similar to what you may see today for exceeding session counts.