Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE 1.2 upgrade time

If someone has done a 1.2 upgrade, can you let me know about how long it took?

Thanks!

Sent from Cisco Technical Support iPhone App

9 REPLIES
New Member

ISE 1.2 upgrade time

For me it took around 2.5 hours. But this was in a lab scenario with minimal devices.

New Member

ISE 1.2 upgrade time

Hello,

We have tried it in our lab too and it takes 40-80 minutes approximately.

New Member

Re: ISE 1.2 upgrade time

Thank, I was able to mock up a lab yesterday and it took exactly 2 hours.

Sent from Cisco Technical Support iPhone App

Bronze

ISE 1.2 upgrade time

Upgrade Time Estimation

The following table provides an estimate of the amount of time it might take to upgrade to Release 1.2. Actual time taken for upgrade varies depending on a number of factors. Your production network continues to function without any downtime during the upgrade process. The data presented here is from a deployment with 44 Cisco ISE nodes (2 Administration nodes, 2 Monitoring nodes, and 40 Policy Service nodes). This deployment comprises 100,000 endpoints; 12,500 users; 25,000 guest users; 100 user groups (with 5 attributes per user). The Profiling service was enabled and the following probes were turned on: DHCP, HTTP, RADIUS, Network Scan (NMAP), DNS, SNMPQUERY.

Type   of Deployment

Node   Persona

Time   Taken for Upgrade

Standalone   (2000 endpoints)

Administration,   Policy Service, Monitoring

1 hour 20   minutes

Distributed   (12,500 users and 25,000 endpoints)

Secondary Administration

7 hours

Monitoring

4 hours

Policy Service

1.5 hours

Administration,   Monitoring

2 hours

Factors That Affect Upgrade Time

  • Number      of endpoints in your network
  • Number      of users and guest users in your network
  • Profiling      service, if enabled

Re:ISE 1.2 upgrade time

If you are not looking to retain any monitoring logs you should take an application only backup from your admin node, backup your certs and have your licenses handy and then reset the ise database. You can then run the upgrade to 1.2.

When you restore your database ise will do the upgrade.

For all your psn nodes do the same but do not restore. It will grab the database from the primary admin node.


Sent from Cisco Technical Support Android App

Tarik Admani *Please rate helpful posts*
Silver

Re:ISE 1.2 upgrade time

Hello,

I have just completed my upgradation o ISE 1.2 and it took me approximately 1 hour 40minutes and I think this is the minimum amount of time it normally takes.

New Member

Re:ISE 1.2 upgrade time

We are using Cisco ISE 1.1.4 with the final patch for that series. We have a two-admin node setup. No other nodes at all. How long do you think an upgrade to 1.2 will take?

Also, I note that there is a Cumulative Patch 4 for ISE 1.2. Does this have to be installed immediately after upgrading to 1.2? If so, how long should I set aside for this patch to install?

ISE 1.2 upgrade time

It's hard to judge because of how large the monitoring database is. Most cases the node that is the log collector (monitoring node) is what takes the bulk of the time to upgrade. If you are not in need of the logs, your best bet is to take an ise application only backup, backup your certs, and have your licenses handy. Reset one of the nodes and run the upgrade, once the upgrade is finished you can restore your backup and ISE will upgrade it much faster.

Thanks

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
Cisco Employee

Re:ISE 1.2 upgrade time

Hi Robert,

Upgrade time will vary from Node personas like Administration nodes will take more time when compared to policy service nodes and MNT nodes will take around approx of 4 hours if you have MNT data to get updated as well.

Also the upgrade times will vary based on the number of endpoints and number of users and guest users and also the profiling services that were enabled on ISE.

It is strongly recommended to take the backup of ISE before you start the upgrade.

For best practises please refer to below upgrade guide.

http://www.cisco.com/en/US/docs/security/ise/1.2/upgrade_guide/b_ise_upgrade_guide_chapter_01.html

It is not required to install ISE 1.2 cumulative Patch 4 right immediately after the upgrade. All these patches have got few defects addressed and you can refer to release notes for the list of defects that were addressed. If you feel you were impacted by those defects you can goahead and install the patches.

The release notes is as follows:

http://www.cisco.com/en/US/docs/security/ise/1.2/release_notes/ise12_rn.html

361
Views
10
Helpful
9
Replies