Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Based on bug CSCvv49403 Cisco ISE 2.7 patch 3 is not vulnerable and port 8084 for BYOD Android is configured only for TLS 1.2. But after installing patch 4 or patch 5 Nessus scanner again show TLS 1.1. I have 2 questions:1. If will be fixed it in pat...
Hi All,we use MAB on 2960X stacks (15.2(7)E2) and 4500E-7L (3.11.2E based on 15.2(7)E2) switches. After upgrade from 15.2(7)E1 to 15.2(7)E2 we have issue with automate-tester. Switch all times is testing far_ISE.I made short test and temporary deny o...
Hello,
it seems ISE 2.6 is also vulnerable on CSCvh91118.
I can't find authentication details section in 2.6 version (upgraded from 2.4 patch 5).
Do you plan any patch for it?
Thanks
Pawel
It was strange because in Deployment status - no action for replicated. My theory is compacting database after upgrade or similar case caused timeouts for RADIUS (TACACS worked fine). We were tunnned RADIUS settings (increased reauthentication time) ...
It seems you tested on empty application (no authentications in Dashboard).
TAC found bug in Patch 1 with database credentials in existing HA deployment. Issue is under investigation.
Endpoints - Pass 2748 Fail 23; device admin 300 Fail 0 - it's small deployment in HA (2 ISE VM in different localization).
At this moment 16CPU/64GB RAM/600GB HDD VM on ESXi - additional 32GB probably doesn't matter because small instance should use ...
From about 20th September all was fine. After upgrade RADIUS service fapped betwee 2 ISE instances (timeouts). We increased RAM from 32 to 64GB, configured cache DNS, few times reload and ISE fixed self. Cisco TAC verified configuration and all was r...
In my case:
1. What was your Cisco ISE Version & Patch before the upgrade ? Upgrade from 3.1P9 to 3.4 in August 2024.
2. Did you have any Hotpatch installed ? No patch available other than 1 for 3.4, but before upgrade to 3.4 patch ise-apply-CSCwk619...
