topic Re: ISE Apache in Network Access Control

ISE Apache

zhiyuali — Wed, 10 Jan 2018 04:49:36 GMT

Who could tell me how to check the apache version in the ISE device?

Re: ISE Apache

Jason Kunst — Wed, 10 Jan 2018 15:22:56 GMT

This is not available via the CLI or open to someone directly that I know of. However you can check this document.

Can you tell us the concern?

https://www.cisco.com/c/dam/en/us/td/docs/security/ise/2-3/open_source/Cisco_Identity_Services_Engine_2_3.pdf

Re: ISE Apache

zhiyuali — Thu, 11 Jan 2018 03:09:19 GMT

Thanks for your reply.

If customer want to fix some bugs about apache, could you please tell me how to do it ?

Re: ISE Apache

Jason Kunst — Thu, 11 Jan 2018 03:12:09 GMT

Please work through the TAC

Re: ISE Apache

Craig Hyps — Thu, 11 Jan 2018 07:17:27 GMT

Note that as a hardened appliance, not a general purpose web server, there may be vulnerabilities which will not be applicable to ISE. For items where ISE is deemed vulnerable, we do issue security updates for open source code in our patches. Issues of very serious nature are flagged by PSIRTS.

Re: ISE Apache

zhiyuali — Thu, 11 Jan 2018 09:09:37 GMT

Thanks for your reply. Does it mean Apache vulnerable is not harmful for ISE?

Re: ISE Apache

Craig Hyps — Thu, 11 Jan 2018 13:06:43 GMT

It would depend on the issue/vulnerability. Some network ports or functions of code may not be enabled, used, or exposed externally.