How to confirm whether Log4j patch is installed or not on ISE

[Lucas Woo]

Hello.

As a title, I want to know the command for confirming the Log4j patch, which is installed on Cisco Identity Services Engine(ISE).

What kind of command can achieve that ?

I need to check above status after powering on and constructing ISE appliance.

# show ???

 

[Rob Ingram · Accepted solution]

@Lucas Woo Login to ISE CLI run the command "show logging application hotpatch.log"

It should show that 'CSCwa47133_3.1.0.518_patch1' is installed, this will confirm that the hot patch was successfully installed.

https://www.cisco.com/web/software/283802505/159629/README_Hotpatch_CSCwa47133_Log4j2-fix-3.1-Patch-1.txt

[Lucas Woo]

Hi Rob Ingram.

I could solve this problem with the way you told.

Thank you

[Marcelo Morais]

Hi @Lucas Woo ,

 beyond what @Rob Ingram said ... please take a look at your ISE version, the CSCwa47133 ISE Evaluation log4j CVE-2021-44228 was already solved on ISE 2.7 P7 and 3.0 P5, 

Hope this helps !!!

[Lucas Woo]

Hi @Marcelo Morais 

Thank you for additional comment.

ISE version I will set up is 2.7.0 and [CSCwa47133] was already installed.
I will check whether I have to install additional patch or not.

Your advice helps me a lot!

[Marcelo Morais]

Hi @Lucas Woo ,

 remember that Patch 7 is the latest patch for ISE 2.7 (ISE Software Download) and please take a look at ISE 2.7 EoL.

Hope this helps !!!