OK after looking at bunch of Cisco and dealt with TAC people, I got the answer. Let me explain my case so you can get info from that. I have 2 ISE devices and the one active one I was able to download the patch and install it via GUI. The second one is in a remote site and from the GUI I can not download the patch. Both nodes(devices) are able to ping each other since this is a HA setup. After I copied the patch from the active node to the FTP:
DNS-NODE1/admin#copy disk:/ise-patchbundle-220.127.116.114-Patch3-196217.SPA.x86_64.tar.gz ftp://x.x.x.x
It will ask you for your user name and password. I used the user name that can get me inside the server therefore will allow me access to the FTP directory.
After checking the FTP root directory I logged into the other node(standby), this is the one I need to install the patch.
DNS-Node2/admin# copy ftp://x.x.x.x/ise-patchbundle-18.104.22.1684-Patch3-201683.SPA.x86_64.tar.gz disk:
That will conclude the copying to and copying from. Then you can do the install.
... View more