topic Re: Cisco ISE 3.2v Patch 7 installation in Network Access Control

Cisco ISE 3.2v Patch 7 installation

Siyadh34 — Fri, 24 Nov 2023 10:25:41 GMT

Hi All,

We are planning to install Patch 7 on Cisco ISE v3.2.

Are there any issues found in Patch 7 for RADIUS - Dot1x authentication (EAP-TLS) & Posture Services?

If anyone installed patch 7 in ISE 3.2 and faced any bugs and issues in ISE authentication & Posture services or faced any other issues, please let me know.

Thanks!!

Re: Cisco ISE 3.2v Patch 7 installation

adamscottmaster2013 — Fri, 24 Nov 2023 12:58:36 GMT

@Siyadh34: you mean 3.1 patch-7 right? Because the latest patch for 3.2 version is patch-4.

I only use 3.1 patch-7 for radius/tacacs+ device administration so I can't comment specifically on the dot1x but I use version 3.2 patch-4 andit seems to be ok so far. I would say that 3.1 patch-7 is a very stable version, IMHO, because it was released in May '23 and Cisco has not released patch-8 for almost six months. Normally, I would see a new patch release every three to four months. YMMV.

Re: Cisco ISE 3.2v Patch 7 installation

Arne Bier — Sun, 26 Nov 2023 22:04:58 GMT

I also haven't seen any noticeable bugs with 3.1 p7. 802.1X been running stable for many months. I don't have any Posture requirements though.

Re: Cisco ISE 3.2v Patch 7 installation

Siyadh34 — Thu, 21 Dec 2023 09:58:46 GMT

Hi Adam,

Recently the patch 8 has been released by cisco for ISE v3.1.

May I know any bugs or issues are there in patch 8?

If yes, please let me know the resolutions for the findings.

Thank you!

Re: Cisco ISE 3.2v Patch 7 installation

Siyadh34 — Thu, 21 Dec 2023 09:59:09 GMT

Hi Arne,

Recently the patch 8 has been released by cisco for ISE v3.1.

May I know any bugs or issues are there in patch 8?

If yes, please let me know the resolutions for the findings.

Thank you!

Re: Cisco ISE 3.2v Patch 7 installation

ahollifield — Thu, 21 Dec 2023 14:48:46 GMT

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/release_notes/b_ise_31_RN.html#concept_kkf_g5z_lzb

Re: Cisco ISE 3.2v Patch 7 installation

Marcelo Morais — Thu, 21 Dec 2023 15:03:53 GMT

Hi @Siyadh34 ,

ISE 3.1 P8 was released on Dec 5th, it's a new patch !!!

Open Caveats on 3.1 P8 (as an example):

CSCwf69715 After patch install TC-NAC adapters will be not reachable and new adapters cannot be configured

Fixed issues on 3.1 P8 (as an example)

CSCwi06794 Live log delay (RADIUS) - Regression for CSCwe00424

Hope this helps !!!

Re: Cisco ISE 3.2v Patch 7 installation

Siyadh34 — Fri, 22 Dec 2023 09:53:06 GMT

Hi @Marcelo Morais ,

Thanks for the Info!

Re: Cisco ISE 3.2v Patch 7 installation

henry.astorga — Tue, 21 Jan 2025 23:19:40 GMT

Hello Siyadh34, I recently installed Patch 7 on ISE 3.2 and so far no issues. I see that it did fix an issue I was seeing with not being able to edit a description field under Network Access Users identities so was happy to see that issue go away. So far so good and I have my eye on version 3.3 Patch 4 upgrade next.

Regards,

HCA

Re: Cisco ISE 3.2v Patch 7 installation

Marcelo Morais — Wed, 22 Jan 2025 01:20:11 GMT

Hi @henry.astorga ,

@Siyadh34 was talking about ISE 3.1 P7 (released on May 25th, 2023).

You are correct, ISE 3.2 P7 (released on Oct 10th, 2024) is a very good release.

Note 1: today, ISE 3.3 P4 (released on Oct 30th, 2024) is Cisco Suggested Release.

Note 2: I'm testing ISE 3.4 P1 (released on Dec 18th, 2024), a very good release !!!

Best regards.

Re: Cisco ISE 3.2v Patch 7 installation

henry.astorga — Wed, 22 Jan 2025 05:34:05 GMT

Hello Marcelo, my eyes missed the v3.1 so thanks for pointing out. I am planning upgrade to v3.3 Patch 4 next month.

Regards,
Henry

Re: Cisco ISE 3.2v Patch 7 installation

Marcelo Morais — Wed, 22 Jan 2025 09:29:54 GMT

Hi @henry.astorga ,

excellent ... remember that ISE 3.2 supports RHEL 8.4 and ISE 3.3, RHEL 8.8, in other words, the Appliance/VM will reboot twice to upgrade Software and ADE-OS.

Hope this helps !!!