topic Re: Cisco ISE 3.2 Patch 7 in Network Access Control

Cisco ISE 3.2 Patch 7

Gouthami Nair — Tue, 05 Nov 2024 07:13:21 GMT

Please confirm the stability of patch 7 of 3.2 version which is released in October 10th.

Is there any issues reported so far for patch 7?

Re: Cisco ISE 3.2 Patch 7

Aref Alsouqi — Tue, 05 Nov 2024 14:26:47 GMT

Every environment is different than the other, so if the release is stable for an environment it doesn't necessarily mean it is stable for all other environments. Best place to look at would be the release notes, as of now for version 3.2 patch 7 there don't seem to be reported any open caveats and there is a bunch of resolved bugs in that patch.

Release Notes for Cisco Identity Services Engine, Release 3.2 - Cisco

Re: Cisco ISE 3.2 Patch 7

bbouchaiba — Tue, 05 Nov 2024 14:31:07 GMT

I have installed Cisco ISE 3.2 Patch 7 on my production env last weekend, so far so good.

Re: Cisco ISE 3.2 Patch 7

MiniNetwork — Fri, 08 Nov 2024 07:55:10 GMT

please advise.

does it support EAP-TLS with Rest-ID (Azure AD)?
Authentication through certificates but user authorization through Azure AD Group membership only (No Intune integration).

Any Caveats with patch 7.

Re: Cisco ISE 3.2 Patch 7

Shorty — Wed, 27 Nov 2024 02:16:15 GMT

Any changes to the way 8021X users authenticate? I noticed this new feature and I’m unsure exactly what it means

From Cisco ISE Release 3.2 Patch 7, Cisco ISE supports a new format of certificates with Security Identifiers (SID).

The SIDs present in the Subject Alternative Name (SAN) fields will not be used for authentication in Cisco ISE. This enhancement prevents authentication failures caused due to incorrect SID parsing in the authentication process.

Re: Cisco ISE 3.2 Patch 7

MiniNetwork — Wed, 27 Nov 2024 04:01:42 GMT

It worked like charm. Thanks

Re: Cisco ISE 3.2 Patch 7

henry.astorga — Tue, 21 Jan 2025 23:29:39 GMT

Hello Goutham, I have recently installed patch 7 on ISE 3.2 and so far no issues. I did request and review a patch 7 bug scrub to get idea of risk based on any open caveats that could potentially cause an issue with any of the ISE services in my production environment so I would recommend reviewing the open caveats list and make educated decision on the patch installation. I have certain compliance requirements so that is also a driving factor to stay as current as possible with product version and patches in my environment.

Regards,

HCA