topic Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion in Network Access Control

ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion P-9

ImranPervaiz67648 — Fri, 16 Jan 2026 09:43:04 GMT

Hello,

After installing Patch 8 on Cisco ISE version 3.3 Patch-7, we have observed a significant increase in /opt disk utilization. The disk usage increased from approximately 22% to 56% within one month after the patch installation and this is only happened on PAN and SPAN, I have checked the PSNs and its working normal without increasing the /opt disk. Prior to Patch 8, disk growth was stable and did not show this trend.

At this time, no changes in logging level, profiling, or operational behavior have been identified that would justify this increase, which raises concern that the disk growth may be related to Patch 8 itself.

We reviewed the release notes for ISE 3.3 Patch 9, which states that the patch primarily addresses an issue where Security Group Access Control Lists (SGACLs) enforcement may fail on Cisco IOS XE Network Access Devices (NADs). In this environment, SGACLs are not in use, so the documented fix in Patch 9 does not directly apply to the customer’s deployment.

Given this, we would like to understand:

Whether Patch 9 includes undocumented fixes or improvements related to disk usage, log handling, or cleanup processes introduced in Patch 8.

If Cisco recommends installing Patch 9 as a general stability or maintenance patch, even when SGACL functionality is not used.

Or whether further investigation (e.g., specific log or database growth under /opt) is recommended before proceeding with another patch installation.

Based on the current information, it is unclear whether installing Patch 9 will resolve the observed /opt disk growth. Guidance on best practice in this scenario would be appreciated.

Kind regards,

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Cristian Matei — Mon, 19 Jan 2026 11:32:07 GMT

Hi,

I'm not aware of something specific to code version 3.3 patch 8, however, could be related to something broader, the process itself. Check this bug here: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs08610

Sometimes, to avoid disk usage increase, when you deploy a new patch, rollback all previous patches and afterwards install the latest patch:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215406-patch-installation-on-ise-and-faq-durin.html#toc-hId-1369370882

Thanks,

Cristian.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Mon, 26 Jan 2026 10:30:20 GMT

I have created a cisco tac to resolve the issue, and i will update this thread accordingly.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Marcelo Morais — Mon, 26 Jan 2026 13:25:43 GMT

@ImranPervaiz67648 ,

please take a look at:

CSCwo67904 ISE ./oracle/base/diag/tnslsnr alert files not cleared and filling opt

CSCwf23446 /opt fills up due to .idx files under mnesia directory

Hope this helps !

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Wed, 18 Feb 2026 12:07:53 GMT

After re-built the M&T database for both ISE nodes (PAN and SPAN), the /opt disk space goes down to 15%. But the disk is still increasing significantly after installing the Patch 8 and now Patch 9.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Greg Gibbs — Wed, 18 Feb 2026 22:32:22 GMT

The new symptom might actually be this bug - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCws61409

A QPR (Quick Patch Release) is in flight with the fix for this for all current versions of ISE (3.3-3.5). It is currently expected to be available within the next two weeks (staggered per version), but could slip past that timeline without notice if issues are found in testing.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

beepmeep — Wed, 18 Feb 2026 22:44:33 GMT

Afaik the hot patch for this bug is already released (I just patched a customer on 3.4P4 last week)..

https://software.cisco.com/download/home/283801620/type/283802505/release/HP-CSCws61409

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Fri, 20 Feb 2026 08:57:19 GMT

@beepmeep This hot patch is release for ISE version 3.1 instead. (ise-apply-CSCws61409_3.1.x_patchall-SPA.tar.gz)

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Fri, 20 Feb 2026 09:36:55 GMT

Thanks for the link, I hope this link will help me. But unfortunately i cannot open this Workaround TZ by this Cisco credentials.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Marcelo Morais — Fri, 20 Feb 2026 12:15:58 GMT

@ImranPervaiz67648 ,

please take a look at: README for installing hot patch to fix CSCws61409.

You can install the ise-apply-CSCws61409_3.1.x_patchall-SPA.tar.gz on these versions:

ISE 3.3 P8
ISE 3.4 P1 to ISE 3.4 P4
ISE 3.5

Hope this helps !

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Fri, 20 Feb 2026 13:07:42 GMT

@Marcelo Morais Thanks for update, Unfortunately i cannot install this hotpatch, because i already updated the ISE version 3.3 with Patch 9. and i cannot see anywhere that this hotpatch fixes the version 3.3 Patch9.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Marcelo Morais — Fri, 20 Feb 2026 16:06:03 GMT

@ImranPervaiz67648 ,

at Operations > Troubleshoot > Debug Wizard > Debug Log Configuration, please double check if the Log Level are Default:

Hope this helps !

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Tue, 10 Mar 2026 13:03:38 GMT

@Marcelo Morais I have seen that the Cache Tracker is in Warn state with Custom as showing in the picture, Should i set as a default ?

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Tue, 10 Mar 2026 13:06:13 GMT

furthermore, i have seen that Collector Debug collector on M&T nodes are also set custom with Warn

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Marcelo Morais — Tue, 10 Mar 2026 18:56:14 GMT

Hi,

@ImranPervaiz67648 wrote:

furthermore, i have seen that Collector Debug collector on M&T nodes are also set custom with Warn

I have seen that the Cache Tracker is in Warn state with Custom as showing in the picture, Should i set as a default ?

yes, since you observed a significant increase in /opt disk usage, it’s important to remove anything that might affect the disk for testing purposes.

Note: please take a look at Release Notes for Cisco ISE 3.3 - Resolved Caveats for Patch 10.

Hope this helps !

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

ImranPervaiz67648 — Wed, 11 Mar 2026 09:29:23 GMT

@Marcelo Morais Yes, i am also thinking this Patch -10 because they have fixed the Cageats with disk issue. But i am also planning to upgrade the ISE nodes to Gold version 3.4 with Patch 3.

Re: ISE 3.3 Patch 8– /opt Disk Utilization Increase and Considera0tion

Marcelo Morais — Wed, 11 Mar 2026 11:55:45 GMT

@ImranPervaiz67648 ,

ISE Suggested Release (Gold Version) is now 3.4 P5, please take a look at ISE Software Download.

Hope this helps !