ISE 3.1, Patch 8 and Log4J
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-17-2024 12:23 PM
For a fresh installation of ISE 3.1, is the Log4j fix included in Patch8? Or do I have to install the Log4j fix before Patch8?
Thank-you
- Labels:
-
Identity Services Engine (ISE)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-17-2024 07:18 PM - edited 02-17-2024 07:21 PM
ISE patches are cumulative, so patch 8 includes all the previous fixes in the previous patches, log4j patch is among them. Also, if you look at Cisco software portal, you will see the latest hotfix you can find for kog4j only available for ISE 3.1 patch 1. From patch 3 on, the log4j hotfix has been already added to the patches themselves, so no need to apply any separate hotfix for it, you should be able to check that by looking at the resolved caveats in patch 8 release notes.
Release Notes for Cisco Identity Services Engine, Release 3.1 - Cisco
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-17-2024 08:42 PM
For ISE 3.1, Log4J software vulnerability fix was released on Patch 3, therefore, Patch 8 should also contain the same fix.
