Cisco ISE 3355 + IOS version information.

vinayjaiswal · ‎01-12-2018

Hi There,

We have Cisco ISE-3355-K9 running with Version : 1.3.0.876,

Currently we are facing services hung issue with this box so we wanted to upgrade with latest IOS version,

I would appreciate if you could give your suggestion for latest IOS version, which version will compatible with this device?

Cisco Application Deployment Engine OS Release: 2.2

ADE-OS Build Version: 2.2.0.162

ADE-OS System Architecture: x86_64

Hostname: NOITDCISEMNTP01

Version information of installed applications

---------------------------------------------

Cisco Identity Services Engine

---------------------------------------------

Version : 1.3.0.876

Build Date : Tue Oct 28 08:32:29 2014

Install Date : Tue May 19 22:37:29 2015

*****************************************

Displaying 'show version history' output...

*****************************************

---------------------------------------------

Install Date: Tue May 19 16:49:27 IST 2015

Application: ise

Version: 1.3.0.876

Install type: Application Upgrade

Bundle filename: ise-upgradebundle-1.2.x-to-1.3.0.876.repackaged.x86_64.tar.gz

*****************************************

Displaying 'show inventory' output...

*****************************************

NAME: "ISE-3355-K9 chassis", DESCR: "ISE-3355-K9 chassis"

PID: ISE-3355-K9 , VID: V01 , SN: KQ73HKN

[7m--More--[27m

Total RAM Memory: 4044764 kB

Marvin Rhoads · ‎01-13-2018

ISE software is the image running on your appliance. It is not IOS. The latest release of ISE is 2.3 Patch 1.

However your SNS-3355 was end of sales in December 2013.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/eol_C51-728424.html

Cisco only supports ISE 1.x on your old hardware. 2.0 and later only runs on newer appliances (or equivalent sized VMs). The latest 1.x release was 1.4 which is still available although not generally recommended.

If you have a VMware virtualization environment, you would be well-served to migrate to a virtual server and then upgrade. If you don't, then a new appliance would be the best choice. Only if neither of those is an option would I recommend moving to ISE 1.4 - and then only with much hesitation. The 2.x versions are so much better than the older ones.

Since upgrading requires a support contract anyway, I would definitely recommend opening a TAC case to have them both look at your current hung server and advise you on the upgrade path that you choose.

vinayjaiswal · ‎01-13-2018

Hi Marvin,

Thank you very much for your update. I was very confused between ISE & SNS device,

Appreciate..! :)

Cheers.!