ISE has always sort of had an Internet connectivity requirement. It needs Internet to download Posture updates, Client Provisioning packages, and Profiler Feed updates. But with that said, there are ways to get the updates "offline" because there are a lot of customer environments where ISE cannot talk to the Internet, such as the DoD and other restrictive networks.