ISE 2.6 Patch 4 Deferred/Removed

[obrien-r]

For any like me that was awaiting some of the fixes in Patch 4 and jumped on and downloaded it, please be aware it has been deferred and removed from CCO due to a bug/problem it introduces. Bug is CSCvt18276

According to my CCO notification, the expected replacement - Patch 5 - is due approx 12 Mar

Anyway, hope that information helps someone...

[Leo Laohoo]

---

@obrien-r wrote:

the expected replacement - Patch 5 - is due approx 12 Mar

---

12 March 2020?  Is there enough time to test if Patch 5 fixes CSCvt18276 and, most importantly, not break anything else? 

NOTE:  ISE 2.6, patch 4 bring back "old memories" of the very, very short-lived ISE 2.4, patch 2 (ISE 2.4 Patch 2 Release Now Available).  

[obrien-r]

I would expect so as there is already a "hotfix" available from the TAC 

[Damien Miller]

2.4 patch 4 was deferred, 4 is an unlucky number for ISE.

[cjkaufman@dmgov.org]

Thanks so much for this heads up!  We were going to install patch 4 this morning.  (had already downloaded it.)  Thankfully I saw this bug in my weekly Cisco email...

cjk

[Leo Laohoo]

Heads-up to everyone:  We are having tremendous issues with ISE 2.6, patch 6: Extremely high CPU + very high external authentication latency.

[Marvin Rhoads]

Thanks for sharing @Leo Laohoo . Did you get a BugID from the TAC?

[Leo Laohoo]

---

@Marvin Rhoads wrote:

Did you get a BugID from the TAC?

---

No, @Marvin Rhoads.  

In order to stabilize the cluster, we had to roll back (and remove) patch 6.  

I'll pass on the Bug ID when TAC shares it with us.  

[Ping Zhou]

@Leo Laohoo In this case, which version is stable...relatively? I was gonna patch mine, but now I guess I need to wait a little bit. 

---

@Leo Laohoo wrote:

---

@Marvin Rhoads wrote:

Did you get a BugID from the TAC?

---

No, @Marvin Rhoads.  

In order to stabilize the cluster, we had to roll back (and remove) patch 6.  

I'll pass on the Bug ID when TAC shares it with us.  

---

[Leo Laohoo]

For the time being, ISE 2.6, patch 5.

[Ping Zhou]

@Leo Laohoo Thanks!

[Leo Laohoo]

Update: TAC believes there is a memory leak in the profiler.
No Bug ID (yet).
14 April 2020

[Leo Laohoo]

Update: 23 April 2020
TAC has identified the issue to be CSCvt18276 which has re-emerged in patch 6.
I guess the next step is to wait for TAC to release a fix/patch to patch 6?

[Marvin Rhoads]

Sev 1 Catastrophic bug with 88 support cases re-appears!!!

So much for regression testing.

<facepalm>

Thanks for sharing the BugID @Leo Laohoo 

[Arne Bier]

Does this only affect customers who need Guest Portal? 

What is the recommended ISE 2.6 patch release (patch 3 or 5?)