Migration 22.x to 25.x

on the existing 22 x ics log in to the standalone device or the primary node of the cluster (where the cluster was first formed) and export its binary configs (system cfg and user cfg), and the xml network settings configurations refer to prerequisites for migration docid 3yx6yc99wwhbu1ahdm0wc and supported configuration migration path docid 3yx6yc99wwhbu1ahdm0wc before starting the migration migration procedure explained in this document applies to both isa and isa v appliance exporting configurations ivanti recommends that you export the system and user binary config and the entire xml configuration this provides you with the greatest possibilities for restoring or migrating the configuration however, using the binary exports in the first instance is recommended when importing to export the binary configurations from the 22 x from the 22 x admin ui, select maintenance > import/export > configuration under export, enter a password if you’d like to password protect the configuration file click save config as to save the file the default filename is system cfg select maintenance > import/export > user accounts under export , enter a password if you would like to password protect the configuration file if you choose to password protect the file, ensure that the password is stored in a long term sustainable location there is no way to recover the password or decrypt the file if the password is lost click save config as to save the file the default filename is users cfg to export the xml network configuration select maintenance > import/export > xml import/export under export , expand system settings and select select all system settings click export and save the xml file make notes of all the local settings for both nodes (if not yet done during preparation stage) ip information, clustering, virtual ports, vlans, hosts, routes, dns settings, snmp (if configured) and syslog settings configuring devices configure the new devices with the network settings identified in the prerequisites docid 3yx6yc99wwhbu1ahdm0wc section the settings to configure are internal virtual ports external virtual ports management ports vlans static routes port settings apply the entitled/purchased licenses to the individual gw or cluster or connect to the license server through gateway licensing mode if you are migrating a non clustered device, skip next 4 steps and proceed in the new isa device (first device), manually create a new cluster and ensure that this does not conflict in settings or naming with your existing production cluster add the second device to the cluster in the primary node cluster configuration and save the settings a click add members to add a member b enter member node name and ip and check netmask and gateway, then click add c click save changes d check cluster status the status turns transitioning for short period, then the first node becomes enabled, and the status turns as leader the second node remains enabled , unreachable until it joins the cluster for full clustering guidance, please refer to the clustering configuration guide https //help ivanti com/ps/help/en us/ics/22 x/clcg/landingpage htm which handles this topic in depth if the xml config is exported from an active/passive cluster, following needs to be done prior to xml import a configure external port for the cluster members (if external ports are configured in cluster) b go to clustering > cluster properties page change the cluster type from active/active to active/passive and add the cluster vip address/es (the example here does not use external port c save the cluster configuration settings d change confirmation will appear confirming change from active/active to active/passive e log in to the second device and join this node to the cluster by clustering > join cluster f click join log in to primary node and check cluster status and it should stabilize in a few minutes importing existing isa configurations to import the isa configurations from the isa appliance admin ui, select maintenance > import/export > configuration select import everything except network settings, cluster settings, and licenses to import all configurations except network, cluster and license settings browse to the configuration file, system cfg enter the password if specified click import config select maintenance > import/export > user accounts and browse to the users cfg file click import config check cluster status (if clustered) and test operation by logging in to the cluster vips (or the standalone device ip)