topic Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks? in Network Access Control

Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Tue, 14 Oct 2025 08:55:42 GMT

Hi,

Today we had a fun experience with Cisco ISE 3.4 patch3. I was creating a new network device for AnyConnect to a Firepower 1120 and configured RADIUS and SNMP shared secret. We use ISE for authorization by group membership and for posture. After that on different two firewalls that are used for AnyConnect the remote access was no longer working. After a lot of debugging and swearing, I finally figured out, that ISE had replaced the shared secret and the SNMP 2c community strings with all asterisks.

I'm sure I'm not that stupid to paste all asterisks into two different network devices. Also the hide character used in the UI is "●" and not "*".

I found this one here, that looks similar, but this is from routers and wireless controllers: https://bst.cisco.com/quickview/bug/CSCvn14027

So is this another funky easter egg?

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Tue, 14 Oct 2025 09:10:31 GMT

Yup. Who needs hackers when Cisco can bring down systems all on its own?
https://bst.cisco.com/quickview/bug/CSCwn09816

The bug description says it should be fixed in ISE 3.4 patch 2, but it still exists in patch 3.

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

adn25 — Tue, 14 Oct 2025 09:41:09 GMT

On a freshly setup ISE 3.4 patch 3 system this bug could not be reproduced. But we have a prod setup where we imported a ISE 3.1 backup. There the bug is reproduceable.

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Tue, 14 Oct 2025 14:00:33 GMT

Workaround is to change the RADIUS secret on the firewall to the same number of asterisks than on ISE. 😄

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

vmiraboronat — Thu, 27 Nov 2025 09:32:11 GMT

Another one here affected by this bug in v3.4 patch 3. Buggiest 'recommended' version ever for us. Happened at least in two network devices in the last month.

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

adn25 — Thu, 27 Nov 2025 10:20:24 GMT

ISE 3.4 patch 4 was released on 4 November 2025 that should fix this issue. We were not courageous enough to install this very young patch.

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

networkchunk — Tue, 16 Dec 2025 13:58:14 GMT

Anyone confirm which version it is actually fixed for them?

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Wed, 17 Dec 2025 05:48:58 GMT

ISE 3.4 patch 4 doesn't have the golden star yet on the download portal. We are scared of every software update from Cisco ...

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Wed, 17 Dec 2025 05:51:02 GMT

We might rather change all our RADIUS secrets to all asterisks. 😄

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Wed, 17 Dec 2025 05:55:25 GMT

The Cisco Software Research page shows 0 bugs for ISE 3.4 patch 3 - so those numbers can't be trusted.

Re: Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

Network Diver — Wed, 17 Dec 2025 10:29:23 GMT

Btw: They have a new bug ID for that: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwp06928