ISE Apache

[zhiyuali]

Who could tell me how to check the apache version in the ISE device?

[Jason Kunst · Accepted solution]

This is not available via the CLI or open to someone directly that I know of. However you can check this document.

Can you tell us the concern?

https://www.cisco.com/c/dam/en/us/td/docs/security/ise/2-3/open_source/Cisco_Identity_Services_Engine_2_3.pdf

[zhiyuali]

Thanks for your reply.

If customer want to fix some bugs about apache, could you please tell me how to do it ?

[Jason Kunst]

Please work through the TAC

[Craig Hyps]

Note that as a hardened appliance, not a general purpose web server, there may be vulnerabilities which will not be applicable to ISE.    For items where ISE is deemed vulnerable, we do issue security updates for open source code in our patches.  Issues of very serious nature are flagged by PSIRTS.

[zhiyuali]

Thanks for your reply. Does it mean Apache vulnerable is not harmful for ISE?

[Craig Hyps]

It would depend on the issue/vulnerability.  Some network ports or functions of code may not be enabled, used, or exposed externally.