Cisco ISE Vulnerability: How to Disable RADIUS Request Rejection and Stay Secure!
Cisco ISE vulnerability alert: If you’re using “Reject RADIUS requests from clients with repeated failures,” it’s time for a quick uncheck! Just head to your system settings and disable that little troublemaker. But remember, once you’ve upgraded to the fixed code, pop it back on like a favorite pair of socks.
Hot Take:
So, Cisco’s ISE devices have a vulnerability issue, but don’t worry, it’s all about rejecting. Yes, rejecting RADIUS requests from persistent clients is the problem. At least it’s consistent with our 2023 theme of rejecting things that don’t work for us! But remember, it’s not you, it’s the configuration settings.
Key Points:
- If “Reject RADIUS requests from clients with repeated failures” is on, Cisco ISE devices are vulnerable.
- Disabling this setting can act as a temporary workaround.
- This setting is enabled by default across most environments.
- After upgrading to the fixed code, the setting should be re-enabled.
- Test environment success doesn’t guarantee real-world applicability.
Already a member? Log in here