Field Notice: FN - 70500 - Cisco Identity Services Engine and Network Admission Control Posture Updates and Client Provisioning Resource Downloads Will Fail If Configured with a Perfigo URL - Configuration Change Recommended

Available Languages

Updated:January 16, 2020

Document ID:FN70500

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	16-Jan-20	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Identity Services Engine System Software	2	2.0, 2.0.1, 2.1.0, 2.2.0, 2.3.0, 2.4.0, 2.6.0, 2.7.0	Applicable only to an ISE which has a Perfigo URL manually configured
NON-IOS	Identity Services Engine System Software	1	1.0, 1.1, 1.2, 1.3, 1.4	Applicable only to an ISE which has a Perfigo URL manually configured
NON-IOS	Network Admission Control (NAC) Software Patches	4.9	4.9.1, 4.9.2, 4.9.3, 4.9.4	NAC Appliance has reached End of Support
NON-IOS	Network Admission Control (NAC) Software Patches	4.8	4.8.3	NAC Appliance has reached End of Support

Defect Information

Defect ID	Headline
CSCvf34445	There were no defects filed with this field notice at the time of publication.

Problem Description

For all affected versions of Cisco Identity Services Engine (ISE) and Cisco Network Admission Control (NAC), posture updates and client provisioning resource downloads will fail if they are manually configured with a Perfigo.com domain URL.

Posture updates will fail if the Update Feed URL field points to https://www.perfigo.com/ise/posture-update.xml.

Client provisioning resource downloads will fail if the Update Feed URL field points to https://www.perfigo.com/ise/provisioning-update.xml.

Background

On 2020-02-17, posture update files and client provisioning resources hosted on Cisco’s Perfigo.com web server will no longer be accessible. Corrective action is only required if the default configuration URL was altered.

For ISE Release 2.4 and later, the correct default configuration URLs are:

For ISE Release 2.3 and earlier, the correct default configuration URLs are:

Problem Symptom

If posture updates and client provisioning resource downloads continue to point to the Perfigo URL after the Perfigo web server is taken offline, these error messages will be seen:

Posture Updates

Client Provisioning

Workaround/Solution

Posture Updates

In ISE, choose Administration > System > Settings > Posture > Updates. Change the Update Feed URL configuration to https://www.cisco.com/web/secure/spa/posture-update.xml.

Client Provisioning

In ISE, choose Administration > System > Settings > Client Provisioning. Change the Update Feed URL configuration to https://www.cisco.com/web/secure/spa/provisioning-update.xml.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.