topic Messaging Quick Link Error after applying hot patch in Network Access Control

Messaging Quick Link Error after applying hot patch

Abdulaziz Loonat — Sat, 21 Jun 2025 18:12:01 GMT

Have 3 nodes running v3.2 Patch 7

1 node in Azure

2 nodes physical devices

Applied this hotpatch to the Azure node

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-aws-static-cred-FPMjUcm7

Now I am getting an alert Quick Link Error/Messaging Service Cause={auth_failure;"access_refused - Login Was Refused Using Authentication Mechanism Plain. For Details See The Broker Logfile

This onl;y happened after the hot patch was installed, as far as I am aware as the advisory is related to cloud hosted Azure nodes, I dont need to install it on the other 2 physical nodes.

I have checked and all services are running within ISE

Anyone else seen this error after applying the hot patch.

Re: Messaging Quick Link Error after applying hot patch

Mark Elsen — Sun, 22 Jun 2025 06:46:53 GMT

- @Abdulaziz Loonat When that happens ; check outputs from :
show logging system ade/ADE.log
show logging application ise-messaging/ise-messaging.log

Re: Messaging Quick Link Error after applying hot patch

Abdulaziz Loonat — Tue, 24 Jun 2025 08:38:34 GMT

I have checked the logs and error relates to authentication

RabbitMQ System Event: user.authentication.failure

The issue only occured after I applied the hot patch to resolve the vulnerability

I have also checked and confirmed all ports are listening for the Message Link Queue

Re: Messaging Quick Link Error after applying hot patch

Mark Elsen — Tue, 24 Jun 2025 08:56:00 GMT

- @Abdulaziz Loonat This looks to be an internal issue : for instance this can happen if the credentials are outdated, or if the user does not have the necessary permissions to access the RabbitMQ server.
Basic action : contact TAC , provide all info's and or the troubleshooting (logs) that you did already

Re: Messaging Quick Link Error after applying hot patch

Abdulaziz Loonat — Thu, 17 Jul 2025 15:07:28 GMT

TAC are on the case and still unable to determine the cause. Am I the only organisation after applying the hotfix is getting is error, I am sure other customers will have had same issue and this I assume should have been an internal advisory for support on the fix to this issue

Re: Messaging Quick Link Error after applying hot patch

Marcelo Morais — Fri, 18 Jul 2025 06:20:21 GMT

Hi @Abdulaziz Loonat ,

you said that 1x Node in Azure and 2x Nodes in Physical Devices, please remember that:

" ... If the PPAN (Primary PAN) Node is deployed in the cloud, then Cisco ISE is affected by this vulnerability. If the PPAN Node is on-premises, then it is not affected ... "

Hope this helps !!!