https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771568#M486614 <P>I have asked our SMEs to look into this</P> Wed, 02 Jan 2019 18:12:14 GMT Jason Kunst 2019-01-02T18:12:14Z https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771538#M486604 <DIV class="lia-message-subject lia-component-message-view-widget-subject">&nbsp;</DIV><DIV class="lia-message-body lia-component-body-signature-highlight-escalation"><DIV class="lia-message-body-content"><P>Hi all,</P><P>&nbsp;The<SPAN>&nbsp;</SPAN><A href="https://community.cisco.com/t5/security-documents/ise-security-best-practices-hardening/ta-p/3640651#toc-hId--683279794" target="_blank">ISE Security Best Practices (Hardening)</A>&nbsp;says that ISE 1.2 is using CBC + AES to encrypt user databases.&nbsp;</P><P>Has this changed in 2.4, or is it still using&nbsp;CBC + AES? I can't find where it's documented elsewhere and we're trying to find out for an audit.</P><P>&nbsp;Many thanks for the help!</P></DIV></DIV> Wed, 02 Jan 2019 17:07:09 GMT https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771538#M486604 bobcook1 2019-01-02T17:07:09Z https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771568#M486614 <P>I have asked our SMEs to look into this</P> Wed, 02 Jan 2019 18:12:14 GMT https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771568#M486614 Jason Kunst 2019-01-02T18:12:14Z https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771587#M486627 <P>Thanks, Jason!&nbsp; Much appreciated!</P> Wed, 02 Jan 2019 18:36:28 GMT https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3771587#M486627 bobcook1 2019-01-02T18:36:28Z https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3777925#M486635 Strictly speaking… ISE has ID stores for ISE internal (aka NA) users, admin users, and guest users, which stored in Oracle db tables, but not user databases per se.<BR />SR for your customer i believe was only a couple of months ago so I do not believe any new info.<BR /> For any future looking details please look at <A href="http://cs.co/ise-feedback" target="_blank">http://cs.co/ise-feedback</A> Fri, 11 Jan 2019 16:56:35 GMT https://community.cisco.com/t5/network-access-control/is-v2-4-user-database-encryption-still-the-same-as-v1-2/m-p/3777925#M486635 Jason Kunst 2019-01-11T16:56:35Z