topic Re: Disabling TLS 1.0 broke GUI access to ISE in Network Access Control

Disabling TLS 1.0 broke GUI access to ISE

mariya.telitsina — Thu, 02 Feb 2023 15:26:22 GMT

I'm having ISE 3.1 patch 3 . After disabling tls 1.0 the app server restarted and I could never login to any ISE node in deployment. It just shows blank page after login.

The services are working fine, it's the admin GUI that is not accessible. I found a similar bug and contacted TAC, but some of their workarounds didn't help, nor helped the patching. Any advice is appreciated, except for reimaging.

Re: Disabling TLS 1.0 broke GUI access to ISE

ahollifield — Thu, 02 Feb 2023 17:59:32 GMT

TAC would be the best bet here.

Re: Disabling TLS 1.0 broke GUI access to ISE

Aref Alsouqi — Fri, 03 Feb 2023 15:04:46 GMT

Did you try with different browsers?

Re: Disabling TLS 1.0 broke GUI access to ISE

Nancy Saini — Fri, 03 Feb 2023 17:15:44 GMT

There is known defect which is fixed on 3.1 p4. My suggestion would be to install latest patch of 3.1 and then try to login.

Re: Disabling TLS 1.0 broke GUI access to ISE

adamscottmaster2013 — Fri, 03 Feb 2023 22:01:11 GMT

@Nancy Saini: Would you share the bug defect ID?

Re: Disabling TLS 1.0 broke GUI access to ISE

hslai — Sun, 05 Feb 2023 04:15:11 GMT

@mariya.telitsina : If you may share the SR number, I can take a look. Otherwise, ask TAC to escalate.

@adamscottmaster2013 : Nancy might have meant CSCwc25157, which duplicated to CSCwb96942 and was due to restoring an ISE CFG backup from ISE 3.1 or 3.1 Patch 1 to 3.1 Patch 2+.