Cisco ISE 3.2v Patch 7 installation

[Siyadh34]

Hi All,

We are planning to install Patch 7 on Cisco ISE v3.2.

Are there any issues found in Patch 7 for RADIUS - Dot1x authentication (EAP-TLS) & Posture Services? 

If anyone installed patch 7 in ISE 3.2 and faced any bugs and issues in ISE authentication & Posture services or faced any other issues, please let me know.

Thanks!!

[adamscottmaster2013]

@Siyadh34:  you mean 3.1 patch-7 right?  Because the latest patch for 3.2 version is patch-4.

I only  use 3.1 patch-7 for radius/tacacs+ device administration so I can't comment specifically on the dot1x but I use version 3.2 patch-4  andit seems to be ok so far.  I would say that 3.1 patch-7 is a very stable version, IMHO, because it was released in May '23 and Cisco has not released patch-8 for almost six months.  Normally, I would see a new patch release every three to four months.  YMMV.

[Siyadh34]

Hi Adam,

Recently the patch 8 has been released by cisco for ISE v3.1.

May I know any bugs or issues are there in patch 8?

If yes, please let me know the resolutions for the findings.

Thank you!

[Arne Bier]

I also haven't seen any noticeable bugs with 3.1 p7. 802.1X been running stable for many months.  I don't have any Posture requirements though.

[Siyadh34]

Hi Arne,

Recently the patch 8 has been released by cisco for ISE v3.1.

May I know any bugs or issues are there in patch 8?

If yes, please let me know the resolutions for the findings.

Thank you!

[ahollifield]

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/release_notes/b_ise_31_RN.html#concept_kkf_g5z_lzb

[Marcelo Morais · Accepted solution]

Hi @Siyadh34 ,

 ISE 3.1 P8 was released on Dec 5th, it's a new patch !!!

Open Caveats on 3.1 P8 (as an example):

 CSCwf69715 After patch install TC-NAC adapters will be not reachable and new adapters cannot be configured 

Fixed issues on 3.1 P8 (as an example)

CSCwi06794 Live log delay (RADIUS) - Regression for CSCwe00424 

Hope this helps !!!

[Siyadh34]

Hi @Marcelo Morais ,

Thanks for the Info!

[henry.astorga]

Hello Siyadh34, I recently installed Patch 7 on ISE 3.2 and so far no issues. I see that it did fix an issue I was seeing with not being able to edit a description field under Network Access Users identities so was happy to see that issue go away. So far so good and I have my eye on version 3.3 Patch 4 upgrade next.

Regards,

HCA 

[Marcelo Morais]

Hi @henry.astorga ,

 @Siyadh34 was talking about ISE 3.1 P7 (released on May 25th, 2023).

 You are correct, ISE 3.2 P7 (released on Oct 10th, 2024) is a very good release.

Note 1: today, ISE 3.3 P4 (released on Oct 30th, 2024) is Cisco Suggested Release.

Note 2: I'm testing ISE 3.4 P1 (released on Dec 18th, 2024), a very good release !!!

Best regards.

[henry.astorga]

Hello Marcelo, my eyes missed the v3.1 so thanks for pointing out. I am planning upgrade to v3.3 Patch 4 next month.

Regards,
Henry

[Marcelo Morais]

Hi @henry.astorga ,

 excellent ... remember that ISE 3.2 supports RHEL 8.4 and ISE 3.3, RHEL 8.8, in other words, the Appliance/VM will reboot twice to upgrade Software and ADE-OS.

Hope this helps !!!