Security

Curious as to which version should we upgrade to from 6.8.x. 6.11 is pretty new and rather stay with a more stable version. This is a single C2000V VM at this time. In the near future we will add a second C2000V for redundancy.

I understand both 6.9.x and 6.10.x have reached end of development and would be EOL in Dec. 2023. My questions are:

* Any reason as to why 6.9 continued to be worked on? Does a year older than 6.10.x make it more of a solid version?
* Does 6.10.x bring any must haves that would want your to upgrade to instead of 6.9.x?
* Does End of Development mean no more security updates too, or would these continue until they reach EOL?

With regards to 6.11.x,
* Any reason I should STRONGLY consider 6.11.x at this time?

Thanks everyone in advance - Ricardo.

------------------------------
---
°(((=((===°°°(((=================================
------------------------------

The reason to go for 6.11 is that an upgrade to ClearPass 6.11 will include a full re-installation of the system. If you make the jump to 6.11 now, you don't need to do that in one year time (and on two appliances instead of one now).

Another thing to consider is that an upgrade to 6.11 is supported from 6.9 or 6.10, which means you need to upgrade to one of those anyway before you can go to 6.11. Then it looks like you need to determine if you want to go to 6.11 immediately, or do it in the next 12 months.

About the 6.9 or 6.10, I think (but ask TAC if you need to know for sure) that 6.9 is in use with some large conservative customers that have in their processes extensive testing when going from one major version to the other. If you upgrade from 6.8 to 6.10 (or to 6.9) the effort would be the same and with 6.10 you are on a more modern version. To my experience 6.10 is really stable as well; but every customer should make her/his own considerations.

Check here for more details on End-of-Life and End-of-Support. In short, you can expect vulnerability fixes until the end-of-support date.


------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Thanks Herman,

We'll be upgrading to 6.10. Now, here's the next issue - disk space.

The existing CV2000 is running 6.8.6 with the recommended memory and CPU, but a 500gb drive. Documentation is not clear with regards of space: "500 GB disk space required for existing deployments (upgrading from 6.3.6, 6.4.7, or 6.5.x) (thick provisioned)"

Does it mean that unless you're coming from 6.3.6, 6.4.7 or 6.5.x you can do it, but not from 6.8.x?

Assuming the upgrade is allowed, I would need to upgrade 6.8.6 --> 6.8.9 --> 6.10.0 --> 6.10.8.

If not, then I would need to deploy new 6.10.0 --> restore from backup --> 6.10.8

Current environment only using 50gb of the 250gb it has.Thanks in advance - Ricardo.

------------------------------
---
°(((=((===°°°(((=================================
------------------------------

Original Message:
Sent: Dec 22, 2022 04:04 AM
From: Herman Robers
Subject: CPPM 6.8.x upgrade to 6.9.x or 6.10.x? Or 6.11?

The reason to go for 6.11 is that an upgrade to ClearPass 6.11 will include a full re-installation of the system. If you make the jump to 6.11 now, you don't need to do that in one year time (and on two appliances instead of one now).

Another thing to consider is that an upgrade to 6.11 is supported from 6.9 or 6.10, which means you need to upgrade to one of those anyway before you can go to 6.11. Then it looks like you need to determine if you want to go to 6.11 immediately, or do it in the next 12 months.

About the 6.9 or 6.10, I think (but ask TAC if you need to know for sure) that 6.9 is in use with some large conservative customers that have in their processes extensive testing when going from one major version to the other. If you upgrade from 6.8 to 6.10 (or to 6.9) the effort would be the same and with 6.10 you are on a more modern version. To my experience 6.10 is really stable as well; but every customer should make her/his own considerations.

Check here for more details on End-of-Life and End-of-Support. In short, you can expect vulnerability fixes until the end-of-support date.


------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

If you redeploy the ClearPass VM, it should follow the system requirements for that version.
If you upgrade an existing VM, that followed the older 500 GB disk recommendations, the upgrade will still be supported and it does not require a reinstallation (which would have been the consequences of enforcing the new disk requirements).

That may sound weird, but if you don't follow that guidance you may get issues when asking for support. Aruba TAC have seen many cases where customers decided to ignore the system requirements for various reasons and get into troubles.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: Dec 27, 2022 01:56 PM
From: Ricardo Stella
Subject: CPPM 6.8.x upgrade to 6.9.x or 6.10.x? Or 6.11?

Thanks Herman,

We'll be upgrading to 6.10. Now, here's the next issue - disk space.

The existing CV2000 is running 6.8.6 with the recommended memory and CPU, but a 500gb drive. Documentation is not clear with regards of space: "500 GB disk space required for existing deployments (upgrading from 6.3.6, 6.4.7, or 6.5.x) (thick provisioned)"

Does it mean that unless you're coming from 6.3.6, 6.4.7 or 6.5.x you can do it, but not from 6.8.x?

Assuming the upgrade is allowed, I would need to upgrade 6.8.6 --> 6.8.9 --> 6.10.0 --> 6.10.8.

If not, then I would need to deploy new 6.10.0 --> restore from backup --> 6.10.8

Current environment only using 50gb of the 250gb it has.Thanks in advance - Ricardo.

------------------------------
---
°(((=((===°°°(((=================================
------------------------------


Original Message:
Sent: Dec 22, 2022 04:04 AM
From: Herman Robers
Subject: CPPM 6.8.x upgrade to 6.9.x or 6.10.x? Or 6.11?

The reason to go for 6.11 is that an upgrade to ClearPass 6.11 will include a full re-installation of the system. If you make the jump to 6.11 now, you don't need to do that in one year time (and on two appliances instead of one now).

Another thing to consider is that an upgrade to 6.11 is supported from 6.9 or 6.10, which means you need to upgrade to one of those anyway before you can go to 6.11. Then it looks like you need to determine if you want to go to 6.11 immediately, or do it in the next 12 months.

About the 6.9 or 6.10, I think (but ask TAC if you need to know for sure) that 6.9 is in use with some large conservative customers that have in their processes extensive testing when going from one major version to the other. If you upgrade from 6.8 to 6.10 (or to 6.9) the effort would be the same and with 6.10 you are on a more modern version. To my experience 6.10 is really stable as well; but every customer should make her/his own considerations.

Check here for more details on End-of-Life and End-of-Support. In short, you can expect vulnerability fixes until the end-of-support date.


------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.