Cisco ISE 3.2 Patch 7

[Gouthami Nair]

Please confirm the stability of patch 7 of 3.2 version which is released in October 10th.

Is there any issues reported so far for patch 7? 

[Aref Alsouqi]

Every environment is different than the other, so if the release is stable for an environment it doesn't necessarily mean it is stable for all other environments. Best place to look at would be the release notes, as of now for version 3.2 patch 7 there don't seem to be reported any open caveats and there is a bunch of resolved bugs in that patch.

Release Notes for Cisco Identity Services Engine, Release 3.2 - Cisco

[bbouchaiba]

I have installed Cisco ISE 3.2 Patch 7 on my production env last weekend, so far so good.

[Shorty]

Any changes to the way 8021X users authenticate? I noticed this new feature and I’m unsure exactly what it means

From Cisco ISE Release 3.2 Patch 7, Cisco ISE supports a new format of certificates with Security Identifiers (SID).

The SIDs present in the Subject Alternative Name (SAN) fields will not be used for authentication in Cisco ISE. This enhancement prevents authentication failures caused due to incorrect SID parsing in the authentication process.

[MiniNetwork]

please advise.

does it support EAP-TLS with Rest-ID (Azure AD)?
Authentication through certificates but user authorization through Azure AD Group membership only (No Intune integration).

Any Caveats with patch 7.

[MiniNetwork]

It worked like charm. Thanks

[henry.astorga]

Hello Goutham, I have recently installed patch 7 on ISE 3.2 and so far no issues. I did request and review a patch 7 bug scrub to get idea of risk based on any open caveats that could potentially cause an issue with any of the ISE services in my production environment so I would recommend reviewing the open caveats list and make educated decision on the patch installation. I have certain compliance requirements so that is also a driving factor to stay as current as possible with product version and patches in my environment.

Regards,

HCA