3650 OS Tenable

[Rich Kirk]

Recently found an issue where Tenable Scans show 16.12.08 as Cisco Unsupported OS. Upon investigating it shows that the support ended on 8/18/2022 for 16.12.XX. 

How can .08 be in that category when it wasn't released until 09/20/2022.

I updated all of out 3650's between Oct22 to Early Nov22 and the scan that is saying this was ran on Jan 01 2023.

When trying the link listed in the scan, it says to update your OS to 17. series OS, but none are available for 3650 models and we have a mixed environment of 9300's, 3650's, and a few 3850's. We are slowly changing out all 3k series with 9k, but have quite a few 3650's left in operation currently.

Is there a plan to drop a 17.XX.XX OS for these models.

[balaji.bandi]

Software is end of support, Cisco only release any security patches if required, and hardwre support until 2026 as you mentioned correct.

Tenable Scans - you need to check where the source coming from, or just ignore that model as you know they are end of software support.

[Rich Kirk]

Balagi, Thanks for the reply. I guess were going to have to cough up some money for more 9k series somehow. Our IA shop won't ignore the model in that scan and to get them off the Critical listing they'll want them replaced or somehow updated.

[balaji.bandi]

I have come come across this situation, where the money crunch due to that no hardware buy, what i did was i pulled all those device behind FW, so its secure inside FW region, no scan or attacks can view those devices. (we know those are end of life.) that is only way we can securre them