topic Re: Cisco SSL FIPS mode in ISE 3.1 patch-3 in Network Access Control

Cisco SSL FIPS mode in ISE 3.1 patch-3

adamscottmaster2013 — Fri, 24 Jun 2022 17:57:35 GMT

My SNS-3615 is running ISE 3.1 patch-3 with FIPs mode DISABLED; --> Administration --> System --> Settings --> FIPs mode disabled.

However, from the ISE 3.1 patch-3 server, whenever I ssh into my external CentOS-7 Linux server, that also serves as my remote repository, I get this:

ISE/admin# ssh 192.168.1.1 root
Operating in CiscoSSL FIPS mode
FIPS mode initialized
root@192.168.1.1's password:
Last login: Sat Jun 11 10:54:28 2022 from 192.168.1.1
[root@CentOS-53 ~]#

What does that mean? Why is ISE still operating in FIPS mode? I rebooted the ISE multiple times and still see the same output.

Thoughts?

Re: Cisco SSL FIPS mode in ISE 3.1 patch-3

Mark Elsen — Sat, 25 Jun 2022 05:35:15 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt88460 , the bug report refers to 2.6 , but also no Known Fixed Releases are mentioned , you will probably have to discuss this with TAC.

Re: Cisco SSL FIPS mode in ISE 3.1 patch-3

adamscottmaster2013 — Sun, 26 Jun 2022 13:56:23 GMT

Why does the status listed as "Fixed"?

Re: Cisco SSL FIPS mode in ISE 3.1 patch-3

Mark Elsen — Sun, 26 Jun 2022 14:43:21 GMT

- Ignore that . it's a bug in the bug-report (.....)

Re: Cisco SSL FIPS mode in ISE 3.1 patch-3

adamscottmaster2013 — Sun, 26 Jun 2022 19:33:40 GMT

where you do get that information from?